Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libvisagamepep all versions
    MAL-2023-4639 checkmarx 2 IOCs
  • PyPI
    libcvgetsplit all versions
    MAL-2023-3957 checkmarx 2 IOCs
  • PyPI
    tppyreplacestr all versions
    MAL-2023-7477 checkmarx 2 IOCs
  • PyPI
    selfvisacontrolcraft all versions
    MAL-2023-6769 checkmarx 2 IOCs
  • PyPI
    selfpyosinthacked all versions
    MAL-2023-6526 checkmarx 2 IOCs
  • PyPI
    selfpoststringvm all versions
    MAL-2023-6480 checkmarx 2 IOCs
  • PyPI
    selfkillguipaypal all versions
    MAL-2023-6245 checkmarx 2 IOCs
  • PyPI
    selfinfovisakill all versions
    MAL-2023-6214 checkmarx 2 IOCs
  • PyPI
    libmcpingstudy all versions
    MAL-2023-4234 checkmarx 2 IOCs
  • PyPI
    libhydrastrpy all versions
    MAL-2023-4089 checkmarx 2 IOCs
  • PyPI
    esqsuperosintpost all versions
    MAL-2023-3468 checkmarx 2 IOCs
  • PyPI
    esqstringtoolhacked all versions
    MAL-2023-3430 checkmarx 2 IOCs
  • PyPI
    selfproofloadram all versions
    MAL-2023-6491 checkmarx 2 IOCs
  • PyPI
    selfloadpywnvidia all versions
    MAL-2023-6296 checkmarx 2 IOCs
  • PyPI
    py-studymaskultra all versions
    MAL-2023-5667 checkmarx 2 IOCs
  • PyPI
    py-pulltoolurl all versions
    MAL-2023-5510 checkmarx 2 IOCs
  • PyPI
    py-paypalgetultra all versions
    MAL-2023-5393 checkmarx 2 IOCs
  • PyPI
    py-hydrapypush all versions
    MAL-2023-5203 checkmarx 2 IOCs
  • PyPI
    libpostcraftpush all versions
    MAL-2023-4349 checkmarx 2 IOCs
  • PyPI
    libkillproofpaypal all versions
    MAL-2023-4145 checkmarx 2 IOCs
  • PyPI
    libkillgamemc all versions
    MAL-2023-4140 checkmarx 2 IOCs
  • PyPI
    libinforeplacehacked all versions
    MAL-2023-4108 checkmarx 2 IOCs
  • PyPI
    libadcvcpu all versions
    MAL-2023-3858 checkmarx 2 IOCs
  • PyPI
    esqvisakilled all versions
    MAL-2023-3546 checkmarx 2 IOCs
  • PyPI
    esqguipostpost all versions
    MAL-2023-2933 checkmarx 2 IOCs
  • PyPI
    esqencodecvpush all versions
    MAL-2023-2854 checkmarx 2 IOCs
  • PyPI
    tppingsplitcc all versions
    MAL-2023-7353 checkmarx 2 IOCs
  • PyPI
    selfcraftvmultra all versions
    MAL-2023-6010 checkmarx 2 IOCs
  • PyPI
    py-controlpingpong all versions
    MAL-2023-5034 checkmarx 2 IOCs
  • PyPI
    libosintcvkill all versions
    MAL-2023-4264 checkmarx 2 IOCs
  • PyPI
    esqverlibosint all versions
    MAL-2023-3519 checkmarx 2 IOCs
  • PyPI
    esqultravirtualstring all versions
    MAL-2023-3499 checkmarx 2 IOCs
  • PyPI
    esqpyhydrarandom all versions
    MAL-2023-3292 checkmarx 2 IOCs
  • PyPI
    esqgrandpyinfo all versions
    MAL-2023-2918 checkmarx 2 IOCs
  • PyPI
    esqcraftverhacked all versions
    MAL-2023-2815 checkmarx 2 IOCs
  • PyPI
    tpvmencodecv all versions
    MAL-2023-7734 checkmarx 2 IOCs
  • PyPI
    tprampipre all versions
    MAL-2023-7508 checkmarx 2 IOCs
  • PyPI
    tpramhydracpu all versions
    MAL-2023-7504 checkmarx 2 IOCs
  • PyPI
    tpponglgtbre all versions
    MAL-2023-7377 checkmarx 2 IOCs
  • PyPI
    selfpullstringpong all versions
    MAL-2023-6512 checkmarx 2 IOCs