Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-craftadcandy all versions
    MAL-2023-5053 checkmarx 2 IOCs
  • PyPI
    libvergethacked all versions
    MAL-2023-4606 checkmarx 2 IOCs
  • PyPI
    libultraultracc all versions
    MAL-2023-4584 checkmarx 2 IOCs
  • PyPI
    esqosintcandycc all versions
    MAL-2023-3146 checkmarx 2 IOCs
  • PyPI
    tpurlpaypalcraft all versions
    MAL-2023-7687 checkmarx 2 IOCs
  • PyPI
    tppiphttpstring all versions
    MAL-2023-7361 checkmarx 2 IOCs
  • PyPI
    tpmineloadtool all versions
    MAL-2023-7281 checkmarx 2 IOCs
  • PyPI
    selfvisaosintreplace all versions
    MAL-2023-6776 checkmarx 2 IOCs
  • PyPI
    selfguiloadget all versions
    MAL-2023-6132 checkmarx 2 IOCs
  • PyPI
    py-urlcandyosint all versions
    MAL-2023-5719 checkmarx 2 IOCs
  • PyPI
    py-pymcosint all versions
    MAL-2023-5527 checkmarx 2 IOCs
  • PyPI
    liburlsplitpush all versions
    MAL-2023-4595 checkmarx 2 IOCs
  • PyPI
    esqrevmgrand all versions
    MAL-2023-3389 checkmarx 2 IOCs
  • PyPI
    esqreplacegrandpyw all versions
    MAL-2023-3369 checkmarx 2 IOCs
  • PyPI
    tphackedcontroled all versions
    MAL-2023-7090 checkmarx 2 IOCs
  • PyPI
    tpcpuedosint all versions
    MAL-2023-6960 checkmarx 2 IOCs
  • PyPI
    tpcandycontrolpush all versions
    MAL-2023-6919 checkmarx 2 IOCs
  • PyPI
    selfstudynvidiapep all versions
    MAL-2023-6666 checkmarx 2 IOCs
  • PyPI
    selfcvcvmask all versions
    MAL-2023-6012 checkmarx 2 IOCs
  • PyPI
    selfccpullint all versions
    MAL-2023-5961 checkmarx 2 IOCs
  • PyPI
    py-killhackedpep all versions
    MAL-2023-5256 checkmarx 2 IOCs
  • PyPI
    esqultrareplacecandy all versions
    MAL-2023-3497 checkmarx 2 IOCs
  • PyPI
    esqstudypongcandy all versions
    MAL-2023-3455 checkmarx 2 IOCs
  • PyPI
    esqpaypalgamemc all versions
    MAL-2023-3165 checkmarx 2 IOCs
  • PyPI
    esqgrandminetool all versions
    MAL-2023-2912 checkmarx 2 IOCs
  • PyPI
    tppaypalrandomurl all versions
    MAL-2023-7327 checkmarx 2 IOCs
  • PyPI
    tploadloadosint all versions
    MAL-2023-7230 checkmarx 2 IOCs
  • PyPI
    py-libhydraed all versions
    MAL-2023-5290 checkmarx 2 IOCs
  • PyPI
    libvirtualpostcc all versions
    MAL-2023-4630 checkmarx 2 IOCs
  • PyPI
    liblibsuperad all versions
    MAL-2023-4188 checkmarx 2 IOCs
  • PyPI
    libcraftloadurl all versions
    MAL-2023-3942 checkmarx 2 IOCs
  • PyPI
    esqvisaurlstring all versions
    MAL-2023-3554 checkmarx 2 IOCs
  • PyPI
    esqvisamaskpyw all versions
    MAL-2023-3547 checkmarx 2 IOCs
  • PyPI
    tpnvidiarandsplit all versions
    MAL-2023-7299 checkmarx 2 IOCs
  • PyPI
    tpencodecandyosint all versions
    MAL-2023-7012 checkmarx 2 IOCs
  • PyPI
    selfintelsplitlgtb all versions
    MAL-2023-6225 checkmarx 2 IOCs
  • PyPI
    py-splitvercraft all versions
    MAL-2023-5627 checkmarx 2 IOCs
  • PyPI
    esqverccpush all versions
    MAL-2023-3513 checkmarx 2 IOCs
  • PyPI
    esqinfohttppush all versions
    MAL-2023-2978 checkmarx 2 IOCs
  • PyPI
    tplibhydrahacked all versions
    MAL-2023-7208 checkmarx 2 IOCs