Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-studytoolvisa all versions
    MAL-2023-5677 checkmarx 2 IOCs
  • PyPI
    py-lgtbpipram all versions
    MAL-2023-5279 checkmarx 2 IOCs
  • PyPI
    esqmcreplacestr all versions
    MAL-2023-3112 checkmarx 2 IOCs
  • PyPI
    esqhackedrandomcc all versions
    MAL-2023-2946 checkmarx 2 IOCs
  • PyPI
    tpsplitlibpaypal all versions
    MAL-2023-7585 checkmarx 2 IOCs
  • PyPI
    tpcandyreed all versions
    MAL-2023-6931 checkmarx 2 IOCs
  • PyPI
    selftoolvirtualpep all versions
    MAL-2023-6699 checkmarx 2 IOCs
  • PyPI
    selfrandompostinfo all versions
    MAL-2023-6577 checkmarx 2 IOCs
  • PyPI
    selfgetultrapong all versions
    MAL-2023-6101 checkmarx 2 IOCs
  • PyPI
    py-minepipram all versions
    MAL-2023-5352 checkmarx 2 IOCs
  • PyPI
    libreencodead all versions
    MAL-2023-4470 checkmarx 2 IOCs
  • PyPI
    esqstrpushsplit all versions
    MAL-2023-3443 checkmarx 2 IOCs
  • PyPI
    esqpywrandomstr all versions
    MAL-2023-3317 checkmarx 2 IOCs
  • PyPI
    esqpullcontrolint all versions
    MAL-2023-3259 checkmarx 2 IOCs
  • PyPI
    tppylgtbreplace all versions
    MAL-2023-7467 checkmarx 2 IOCs
  • PyPI
    tpgetpipcv all versions
    MAL-2023-7050 checkmarx 2 IOCs
  • PyPI
    selfrandomcandypy all versions
    MAL-2023-6567 checkmarx 2 IOCs
  • PyPI
    selfencodenvidiaurl all versions
    MAL-2023-6052 checkmarx 2 IOCs
  • PyPI
    py-visavirtualre all versions
    MAL-2023-5777 checkmarx 2 IOCs
  • PyPI
    py-pingcvvm all versions
    MAL-2023-5427 checkmarx 2 IOCs
  • PyPI
    py-hydracontrolcontrol all versions
    MAL-2023-5192 checkmarx 2 IOCs
  • PyPI
    libsplitguipull all versions
    MAL-2023-4494 checkmarx 2 IOCs
  • PyPI
    liblibpongvisa all versions
    MAL-2023-4185 checkmarx 2 IOCs
  • PyPI
    esqinfohackednvidia all versions
    MAL-2023-2976 checkmarx 2 IOCs
  • PyPI
    tppiprandhydra all versions
    MAL-2023-7371 checkmarx 2 IOCs
  • PyPI
    selfrandreplacerand all versions
    MAL-2023-6587 checkmarx 2 IOCs
  • PyPI
    selfpullstringtool all versions
    MAL-2023-6513 checkmarx 2 IOCs
  • PyPI
    py-stredencode all versions
    MAL-2023-5630 checkmarx 2 IOCs
  • PyPI
    py-edpipcc all versions
    MAL-2023-5083 checkmarx 2 IOCs
  • PyPI
    py-craftnvidiamask all versions
    MAL-2023-5057 checkmarx 2 IOCs
  • PyPI
    esqproofpushlib all versions
    MAL-2023-3253 checkmarx 2 IOCs
  • PyPI
    tpultrapullrand all versions
    MAL-2023-7676 checkmarx 2 IOCs
  • PyPI
    tpcontrolkillrandom all versions
    MAL-2023-6946 checkmarx 2 IOCs
  • PyPI
    selfsplitrandompyw all versions
    MAL-2023-6624 checkmarx 2 IOCs
  • PyPI
    py-encodehackeded all versions
    MAL-2023-5090 checkmarx 2 IOCs
  • PyPI
    libpinghttphttp all versions
    MAL-2023-4309 checkmarx 2 IOCs
  • PyPI
    libcontroltoolver all versions
    MAL-2023-3918 checkmarx 2 IOCs
  • PyPI
    esqgamerandpull all versions
    MAL-2023-2882 checkmarx 2 IOCs
  • PyPI
    esqgameloadgui all versions
    MAL-2023-2874 checkmarx 2 IOCs
  • PyPI
    selfpepstudylib all versions
    MAL-2023-6417 checkmarx 2 IOCs