Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqcvultralgtb all versions
    MAL-2023-2833 checkmarx 2 IOCs
  • PyPI
    tpurlpullpaypal all versions
    MAL-2023-7688 checkmarx 2 IOCs
  • PyPI
    tpultravmpy all versions
    MAL-2023-7678 checkmarx 2 IOCs
  • PyPI
    tppullmcreplace all versions
    MAL-2023-7427 checkmarx 2 IOCs
  • PyPI
    tpkillproofpip all versions
    MAL-2023-7191 checkmarx 2 IOCs
  • PyPI
    selfpywgamesuper all versions
    MAL-2023-6536 checkmarx 2 IOCs
  • PyPI
    selfpostguihttp all versions
    MAL-2023-6471 checkmarx 2 IOCs
  • PyPI
    selfminepywurl all versions
    MAL-2023-6344 checkmarx 2 IOCs
  • PyPI
    selfcontrolhttppip all versions
    MAL-2023-5972 checkmarx 2 IOCs
  • PyPI
    py-vmkillencode all versions
    MAL-2023-5784 checkmarx 2 IOCs
  • PyPI
    py-intcputool all versions
    MAL-2023-5225 checkmarx 2 IOCs
  • PyPI
    py-candyproofstring all versions
    MAL-2023-5011 checkmarx 2 IOCs
  • PyPI
    librandomcrafthydra all versions
    MAL-2023-4452 checkmarx 2 IOCs
  • PyPI
    libcandycraftcontrol all versions
    MAL-2023-3874 checkmarx 2 IOCs
  • PyPI
    esqstringsupergui all versions
    MAL-2023-3429 checkmarx 2 IOCs
  • PyPI
    tppywproofstr all versions
    MAL-2023-7492 checkmarx 2 IOCs
  • PyPI
    tpminegetintel all versions
    MAL-2023-7274 checkmarx 2 IOCs
  • PyPI
    tpguiverpyw all versions
    MAL-2023-7088 checkmarx 2 IOCs
  • PyPI
    selfvergrandstr all versions
    MAL-2023-6736 checkmarx 2 IOCs
  • PyPI
    selfpywloadmine all versions
    MAL-2023-6541 checkmarx 2 IOCs
  • PyPI
    selfcpupingcc all versions
    MAL-2023-5993 checkmarx 2 IOCs
  • PyPI
    py-adreplaceinfo all versions
    MAL-2023-4997 checkmarx 2 IOCs
  • PyPI
    libmcpywcontrol all versions
    MAL-2023-4237 checkmarx 2 IOCs
  • PyPI
    libintlibmc all versions
    MAL-2023-4129 checkmarx 2 IOCs
  • PyPI
    esqloadcved all versions
    MAL-2023-3066 checkmarx 2 IOCs
  • PyPI
    esqadintelpong all versions
    MAL-2023-2728 checkmarx 2 IOCs
  • PyPI
    tpsuperultramc all versions
    MAL-2023-7654 checkmarx 2 IOCs
  • PyPI
    tppoststringcontrol all versions
    MAL-2023-7399 checkmarx 2 IOCs
  • PyPI
    selftoollibnvidia all versions
    MAL-2023-6691 checkmarx 2 IOCs
  • PyPI
    selfinfointpy all versions
    MAL-2023-6200 checkmarx 2 IOCs
  • PyPI
    py-urlponggame all versions
    MAL-2023-5726 checkmarx 2 IOCs
  • PyPI
    py-pywrehacked all versions
    MAL-2023-5539 checkmarx 2 IOCs
  • PyPI
    py-hackedpushcandy all versions
    MAL-2023-5164 checkmarx 2 IOCs
  • PyPI
    liblgtbnvidiaproof all versions
    MAL-2023-4163 checkmarx 2 IOCs
  • PyPI
    esqlibadpong all versions
    MAL-2023-3047 checkmarx 2 IOCs
  • PyPI
    esqgettoolvm all versions
    MAL-2023-2903 checkmarx 2 IOCs
  • PyPI
    esqcvlgtbhydra all versions
    MAL-2023-2826 checkmarx 2 IOCs
  • PyPI
    py-libnvidiaping all versions
    MAL-2023-5293 checkmarx 2 IOCs
  • PyPI
    libcontrolminepyw all versions
    MAL-2023-3910 checkmarx 2 IOCs
  • PyPI
    esqtoolverver all versions
    MAL-2023-3490 checkmarx 2 IOCs