Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqsplitpeptool all versions
    MAL-2023-3400 checkmarx 2 IOCs
  • PyPI
    tprampingload all versions
    MAL-2023-7507 checkmarx 2 IOCs
  • PyPI
    py-proofccmask all versions
    MAL-2023-5481 checkmarx 2 IOCs
  • PyPI
    libpeplgtbinfo all versions
    MAL-2023-4296 checkmarx 2 IOCs
  • PyPI
    selfmineultraram all versions
    MAL-2023-6346 checkmarx 2 IOCs
  • PyPI
    esqmaskpepget all versions
    MAL-2023-3087 checkmarx 2 IOCs
  • PyPI
    tppushcpucandy all versions
    MAL-2023-7441 checkmarx 2 IOCs
  • PyPI
    selfvisaurlpong all versions
    MAL-2023-6783 checkmarx 2 IOCs
  • PyPI
    tpvervmsplit all versions
    MAL-2023-7703 checkmarx 2 IOCs
  • PyPI
    tpreplacecrafthacked all versions
    MAL-2023-7555 checkmarx 2 IOCs
  • PyPI
    tppywultraint all versions
    MAL-2023-7496 checkmarx 2 IOCs
  • PyPI
    tphydraloadsuper all versions
    MAL-2023-7125 checkmarx 2 IOCs
  • PyPI
    tpedintload all versions
    MAL-2023-7001 checkmarx 2 IOCs
  • PyPI
    selfosinturlre all versions
    MAL-2023-6381 checkmarx 2 IOCs
  • PyPI
    selfnvidiareplaceload all versions
    MAL-2023-6357 checkmarx 2 IOCs
  • PyPI
    py-ultramcpyw all versions
    MAL-2023-5710 checkmarx 2 IOCs
  • PyPI
    py-strcvkill all versions
    MAL-2023-5628 checkmarx 2 IOCs
  • PyPI
    py-pepmcpaypal all versions
    MAL-2023-5414 checkmarx 2 IOCs
  • PyPI
    libstudyguipip all versions
    MAL-2023-4533 checkmarx 2 IOCs
  • PyPI
    liblgtbpostpaypal all versions
    MAL-2023-4167 checkmarx 2 IOCs
  • PyPI
    libcandyreplacecandy all versions
    MAL-2023-3883 checkmarx 2 IOCs
  • PyPI
    esqpostrandomstring all versions
    MAL-2023-3241 checkmarx 2 IOCs
  • PyPI
    tppyosintrand all versions
    MAL-2023-7470 checkmarx 2 IOCs
  • PyPI
    selfmineencodestr all versions
    MAL-2023-6333 checkmarx 2 IOCs
  • PyPI
    selfcpuintgame all versions
    MAL-2023-5988 checkmarx 2 IOCs
  • PyPI
    py-guimaskram all versions
    MAL-2023-5141 checkmarx 2 IOCs
  • PyPI
    py-encodeproofreplace all versions
    MAL-2023-5095 checkmarx 2 IOCs
  • PyPI
    py-candycontrollgtb all versions
    MAL-2023-5001 checkmarx 2 IOCs
  • PyPI
    libpyminelib all versions
    MAL-2023-4413 checkmarx 2 IOCs
  • PyPI
    liblgtbgrandvm all versions
    MAL-2023-4158 checkmarx 2 IOCs
  • PyPI
    esqinfointproof all versions
    MAL-2023-2981 checkmarx 2 IOCs
  • PyPI
    tpsupermcmc all versions
    MAL-2023-7647 checkmarx 2 IOCs
  • PyPI
    tposintadget all versions
    MAL-2023-7303 checkmarx 2 IOCs
  • PyPI
    tpencodeinteled all versions
    MAL-2023-7015 checkmarx 2 IOCs
  • PyPI
    py-virtualencodevirtual all versions
    MAL-2023-5747 checkmarx 2 IOCs
  • PyPI
    py-splitreplacestring all versions
    MAL-2023-5624 checkmarx 2 IOCs
  • PyPI
    py-randmaskstudy all versions
    MAL-2023-5564 checkmarx 2 IOCs
  • PyPI
    py-ramrandgrand all versions
    MAL-2023-5556 checkmarx 2 IOCs
  • PyPI
    py-pullproofkill all versions
    MAL-2023-5505 checkmarx 2 IOCs
  • PyPI
    py-nvidiarandvirtual all versions
    MAL-2023-5372 checkmarx 2 IOCs