Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-randomsplitram all versions
    MAL-2023-5579 checkmarx 2 IOCs
  • PyPI
    py-paypalintellgtb all versions
    MAL-2023-5396 checkmarx 2 IOCs
  • PyPI
    libstringpostmask all versions
    MAL-2023-4513 checkmarx 2 IOCs
  • PyPI
    tpsuperosintmask all versions
    MAL-2023-7648 checkmarx 2 IOCs
  • PyPI
    tppinghydrainfo all versions
    MAL-2023-7349 checkmarx 2 IOCs
  • PyPI
    py-replaceedpong all versions
    MAL-2023-5599 checkmarx 2 IOCs
  • PyPI
    py-paypalgetmine all versions
    MAL-2023-5392 checkmarx 2 IOCs
  • PyPI
    libpushgetkill all versions
    MAL-2023-4393 checkmarx 2 IOCs
  • PyPI
    esqnvidiastringcv all versions
    MAL-2023-3142 checkmarx 2 IOCs
  • PyPI
    tpcvgrandhacked all versions
    MAL-2023-6985 checkmarx 2 IOCs
  • PyPI
    selftoolinfoint all versions
    MAL-2023-6688 checkmarx 2 IOCs
  • PyPI
    selfproofnvidiagrand all versions
    MAL-2023-6492 checkmarx 2 IOCs
  • PyPI
    py-prooflibhydra all versions
    MAL-2023-5484 checkmarx 2 IOCs
  • PyPI
    py-paypalvirtualcv all versions
    MAL-2023-5408 checkmarx 2 IOCs
  • PyPI
    esqstringpepcv all versions
    MAL-2023-3422 checkmarx 2 IOCs
  • PyPI
    selfrandomstrad all versions
    MAL-2023-6584 checkmarx 2 IOCs
  • PyPI
    py-toolpywnvidia all versions
    MAL-2023-5699 checkmarx 2 IOCs
  • PyPI
    py-lgtbosintload all versions
    MAL-2023-5276 checkmarx 2 IOCs
  • PyPI
    libvmpostmask all versions
    MAL-2023-4659 checkmarx 2 IOCs
  • PyPI
    tpednvidiakill all versions
    MAL-2023-7002 checkmarx 2 IOCs
  • PyPI
    libvmstrpull all versions
    MAL-2023-4666 checkmarx 2 IOCs
  • PyPI
    esqccpullpush all versions
    MAL-2023-2762 checkmarx 2 IOCs
  • PyPI
    tpinfovirtualre all versions
    MAL-2023-7149 checkmarx 2 IOCs
  • PyPI
    selfencodepostmc all versions
    MAL-2023-6055 checkmarx 2 IOCs
  • PyPI
    libstudytoolosint all versions
    MAL-2023-4541 checkmarx 2 IOCs
  • PyPI
    tppostedping all versions
    MAL-2023-7388 checkmarx 2 IOCs
  • PyPI
    tphackedrandhydra all versions
    MAL-2023-7103 checkmarx 2 IOCs
  • PyPI
    esqpinghackedvisa all versions
    MAL-2023-3197 checkmarx 2 IOCs
  • PyPI
    tpproofmcultra all versions
    MAL-2023-7407 checkmarx 2 IOCs
  • PyPI
    libreplacepywpip all versions
    MAL-2023-4483 checkmarx 2 IOCs
  • PyPI
    selfpeppongload all versions
    MAL-2023-6412 checkmarx 2 IOCs
  • PyPI
    py-intcandyintel all versions
    MAL-2023-5223 checkmarx 2 IOCs
  • PyPI
    esqencodepostinfo all versions
    MAL-2023-2861 checkmarx 2 IOCs
  • PyPI
    py-pullcvrand all versions
    MAL-2023-5497 checkmarx 2 IOCs
  • PyPI
    esqpaypalvirtualmc all versions
    MAL-2023-3176 checkmarx 2 IOCs
  • PyPI
    selfgamepullad all versions
    MAL-2023-6079 checkmarx 2 IOCs
  • PyPI
    tpcpupingreplace all versions
    MAL-2023-6968 checkmarx 2 IOCs
  • PyPI
    selfosintcraftlib all versions
    MAL-2023-6360 checkmarx 2 IOCs
  • PyPI
    py-maskmaskload all versions
    MAL-2023-5322 checkmarx 2 IOCs
  • PyPI
    py-killstudygame all versions
    MAL-2023-5266 checkmarx 2 IOCs