Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-pingstringpaypal all versions
    MAL-2023-5439 checkmarx 2 IOCs
  • PyPI
    py-mcosintmc all versions
    MAL-2023-5338 checkmarx 2 IOCs
  • PyPI
    py-infomcpy all versions
    MAL-2023-5213 checkmarx 2 IOCs
  • PyPI
    libosintnvidiapull all versions
    MAL-2023-4272 checkmarx 2 IOCs
  • PyPI
    esqhydraedcc all versions
    MAL-2023-2966 checkmarx 2 IOCs
  • PyPI
    tpvisaguipost all versions
    MAL-2023-7719 checkmarx 2 IOCs
  • PyPI
    tposintcraftram all versions
    MAL-2023-7306 checkmarx 2 IOCs
  • PyPI
    py-vmcvram all versions
    MAL-2023-5780 checkmarx 2 IOCs
  • PyPI
    py-urlhydrakill all versions
    MAL-2023-5723 checkmarx 2 IOCs
  • PyPI
    libsuperkilllib all versions
    MAL-2023-4549 checkmarx 2 IOCs
  • PyPI
    esqgetcontrolpost all versions
    MAL-2023-2887 checkmarx 2 IOCs
  • PyPI
    tppywintelgame all versions
    MAL-2023-7485 checkmarx 2 IOCs
  • PyPI
    selfmcpipcpu all versions
    MAL-2023-6326 checkmarx 2 IOCs
  • PyPI
    libvisaintinfo all versions
    MAL-2023-4643 checkmarx 2 IOCs
  • PyPI
    libcvcontrolhydra all versions
    MAL-2023-3953 checkmarx 2 IOCs
  • PyPI
    esqvirtualedhacked all versions
    MAL-2023-3529 checkmarx 2 IOCs
  • PyPI
    esqcpuguilgtb all versions
    MAL-2023-2793 checkmarx 2 IOCs
  • PyPI
    tpguicontrolcv all versions
    MAL-2023-7074 checkmarx 2 IOCs
  • PyPI
    py-paypalsplitsplit all versions
    MAL-2023-5405 checkmarx 2 IOCs
  • PyPI
    esqedencodeurl all versions
    MAL-2023-2838 checkmarx 2 IOCs
  • PyPI
    tppywproofcpu all versions
    MAL-2023-7491 checkmarx 2 IOCs
  • PyPI
    selfultrapingpush all versions
    MAL-2023-6712 checkmarx 2 IOCs
  • PyPI
    selfgamecvultra all versions
    MAL-2023-6067 checkmarx 2 IOCs
  • PyPI
    py-killtoolad all versions
    MAL-2023-5268 checkmarx 2 IOCs
  • PyPI
    py-ccstringpost all versions
    MAL-2023-5023 checkmarx 2 IOCs
  • PyPI
    esqencodepaypalpong all versions
    MAL-2023-2860 checkmarx 2 IOCs
  • PyPI
    selflgtbstringload all versions
    MAL-2023-6267 checkmarx 2 IOCs
  • PyPI
    py-replacepushinfo all versions
    MAL-2023-5603 checkmarx 2 IOCs
  • PyPI
    libcraftcandyrandom all versions
    MAL-2023-3936 checkmarx 2 IOCs
  • PyPI
    esqmaskcpuhacked all versions
    MAL-2023-3078 checkmarx 2 IOCs
  • PyPI
    selfpywpaypalultra all versions
    MAL-2023-6545 checkmarx 2 IOCs
  • PyPI
    selfloadedpy all versions
    MAL-2023-6288 checkmarx 2 IOCs
  • PyPI
    libcontrolinfostr all versions
    MAL-2023-3907 checkmarx 2 IOCs
  • PyPI
    esqosintvisaget all versions
    MAL-2023-3161 checkmarx 2 IOCs
  • PyPI
    tprandguilib all versions
    MAL-2023-7518 checkmarx 2 IOCs
  • PyPI
    tploadreplacestring all versions
    MAL-2023-7237 checkmarx 2 IOCs
  • PyPI
    tpcrafthydracandy all versions
    MAL-2023-6975 checkmarx 2 IOCs
  • PyPI
    selfhttpsplited all versions
    MAL-2023-6174 checkmarx 2 IOCs
  • PyPI
    libcontrolguipyw all versions
    MAL-2023-3904 checkmarx 2 IOCs
  • PyPI
    esqstringtoolint all versions
    MAL-2023-3431 checkmarx 2 IOCs