Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqhttpvmurl all versions
    MAL-2023-2964 checkmarx 2 IOCs
  • PyPI
    tploadkillping all versions
    MAL-2023-7228 checkmarx 2 IOCs
  • PyPI
    selfmaskminehacked all versions
    MAL-2023-6307 checkmarx 2 IOCs
  • PyPI
    py-visapypost all versions
    MAL-2023-5768 checkmarx 2 IOCs
  • PyPI
    py-supergetnvidia all versions
    MAL-2023-5682 checkmarx 2 IOCs
  • PyPI
    libpywintnvidia all versions
    MAL-2023-4421 checkmarx 2 IOCs
  • PyPI
    libosintguiram all versions
    MAL-2023-4266 checkmarx 2 IOCs
  • PyPI
    py-pingpushultra all versions
    MAL-2023-5438 checkmarx 2 IOCs
  • PyPI
    libpushintpong all versions
    MAL-2023-4397 checkmarx 2 IOCs
  • PyPI
    libedpingcv all versions
    MAL-2023-3974 checkmarx 2 IOCs
  • PyPI
    tppywpullstr all versions
    MAL-2023-7493 checkmarx 2 IOCs
  • PyPI
    tpgetlibget all versions
    MAL-2023-7048 checkmarx 2 IOCs
  • PyPI
    liblgtbencodegrand all versions
    MAL-2023-4156 checkmarx 2 IOCs
  • PyPI
    esqsplitsplitver all versions
    MAL-2023-3406 checkmarx 2 IOCs
  • PyPI
    selfstudyintelcc all versions
    MAL-2023-6663 checkmarx 2 IOCs
  • PyPI
    esqlibtoolhttp all versions
    MAL-2023-3063 checkmarx 2 IOCs
  • PyPI
    selfcraftsuperhacked all versions
    MAL-2023-6009 checkmarx 2 IOCs
  • PyPI
    py-studyproofver all versions
    MAL-2023-5672 checkmarx 2 IOCs
  • PyPI
    libcandykillosint all versions
    MAL-2023-3878 checkmarx 2 IOCs
  • PyPI
    tpinfoencodeget all versions
    MAL-2023-7136 checkmarx 2 IOCs
  • PyPI
    tpedultraintel all versions
    MAL-2023-7010 checkmarx 2 IOCs
  • PyPI
    selfstudyintstudy all versions
    MAL-2023-6664 checkmarx 2 IOCs
  • PyPI
    selfloadtoolcc all versions
    MAL-2023-6297 checkmarx 2 IOCs
  • PyPI
    py-postproofmc all versions
    MAL-2023-5472 checkmarx 2 IOCs
  • PyPI
    py-paypalcandyping all versions
    MAL-2023-5391 checkmarx 2 IOCs
  • PyPI
    esqvmverpep all versions
    MAL-2023-3572 checkmarx 2 IOCs
  • PyPI
    esqtoolpoststr all versions
    MAL-2023-3483 checkmarx 2 IOCs
  • PyPI
    esqrenvidiaad all versions
    MAL-2023-3364 checkmarx 2 IOCs
  • PyPI
    esqhackednvidiamine all versions
    MAL-2023-2944 checkmarx 2 IOCs
  • PyPI
    tppoststrsuper all versions
    MAL-2023-7401 checkmarx 2 IOCs
  • PyPI
    tpcraftcandypyw all versions
    MAL-2023-6973 checkmarx 2 IOCs
  • PyPI
    selfedintsuper all versions
    MAL-2023-6035 checkmarx 2 IOCs
  • PyPI
    py-studykillproof all versions
    MAL-2023-5665 checkmarx 2 IOCs
  • PyPI
    py-pingintelosint all versions
    MAL-2023-5433 checkmarx 2 IOCs
  • PyPI
    py-pepreplacereplace all versions
    MAL-2023-5423 checkmarx 2 IOCs
  • PyPI
    py-intelhackedpyw all versions
    MAL-2023-5230 checkmarx 2 IOCs
  • PyPI
    esqvmgetram all versions
    MAL-2023-3561 checkmarx 2 IOCs
  • PyPI
    esqpephydrapaypal all versions
    MAL-2023-3180 checkmarx 2 IOCs
  • PyPI
    esqmaskcraftnvidia all versions
    MAL-2023-3080 checkmarx 2 IOCs
  • PyPI
    esqkillurlcraft all versions
    MAL-2023-3038 checkmarx 2 IOCs