Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfvirtualinfoencode all versions
    MAL-2023-6758 checkmarx 2 IOCs
  • PyPI
    selfcraftcontrolload all versions
    MAL-2023-6001 checkmarx 2 IOCs
  • PyPI
    py-pullposted all versions
    MAL-2023-5504 checkmarx 2 IOCs
  • PyPI
    libmcrever all versions
    MAL-2023-4240 checkmarx 2 IOCs
  • PyPI
    esqproofurlstudy all versions
    MAL-2023-3257 checkmarx 2 IOCs
  • PyPI
    selfcvinfourl all versions
    MAL-2023-6018 checkmarx 2 IOCs
  • PyPI
    py-lgtbgetgrand all versions
    MAL-2023-5272 checkmarx 2 IOCs
  • PyPI
    py-grandultralgtb all versions
    MAL-2023-5137 checkmarx 2 IOCs
  • PyPI
    libloadhackedpep all versions
    MAL-2023-4193 checkmarx 2 IOCs
  • PyPI
    esqcraftvisaproof all versions
    MAL-2023-2817 checkmarx 2 IOCs
  • PyPI
    esqcraftguimine all versions
    MAL-2023-2805 checkmarx 2 IOCs
  • PyPI
    selfvmcraftpush all versions
    MAL-2023-6792 checkmarx 2 IOCs
  • PyPI
    py-strpushad all versions
    MAL-2023-5651 checkmarx 2 IOCs
  • PyPI
    py-replacepushrand all versions
    MAL-2023-5604 checkmarx 2 IOCs
  • PyPI
    esqosintminehydra all versions
    MAL-2023-3152 checkmarx 2 IOCs
  • PyPI
    esqinfoloadnvidia all versions
    MAL-2023-2983 checkmarx 2 IOCs
  • PyPI
    esqgrandcandyproof all versions
    MAL-2023-2910 checkmarx 2 IOCs
  • PyPI
    esqccreplaceintel all versions
    MAL-2023-2767 checkmarx 2 IOCs
  • PyPI
    tpcandyloadvisa all versions
    MAL-2023-6927 checkmarx 2 IOCs
  • PyPI
    selfrecandyping all versions
    MAL-2023-6589 checkmarx 2 IOCs
  • PyPI
    selfpypeppush all versions
    MAL-2023-6528 checkmarx 2 IOCs
  • PyPI
    selfinfolgtbhydra all versions
    MAL-2023-6201 checkmarx 2 IOCs
  • PyPI
    py-nvidiahttppep all versions
    MAL-2023-5361 checkmarx 2 IOCs
  • PyPI
    py-cvstrpyw all versions
    MAL-2023-5077 checkmarx 2 IOCs
  • PyPI
    selfpeppullram all versions
    MAL-2023-6413 checkmarx 2 IOCs
  • PyPI
    py-ccmcstudy all versions
    MAL-2023-5019 checkmarx 2 IOCs
  • PyPI
    esqpymcpy all versions
    MAL-2023-3295 checkmarx 2 IOCs
  • PyPI
    esqadgameultra all versions
    MAL-2023-2722 checkmarx 2 IOCs
  • PyPI
    selfededpy all versions
    MAL-2023-6032 checkmarx 2 IOCs
  • PyPI
    py-hackedhttpstring all versions
    MAL-2023-5155 checkmarx 2 IOCs
  • PyPI
    librandomcvpyw all versions
    MAL-2023-4453 checkmarx 2 IOCs
  • PyPI
    libguivisastring all versions
    MAL-2023-4051 checkmarx 2 IOCs
  • PyPI
    libadtoolrandom all versions
    MAL-2023-3870 checkmarx 2 IOCs
  • PyPI
    esqvergamepy all versions
    MAL-2023-3515 checkmarx 2 IOCs
  • PyPI
    tpencodereplacepush all versions
    MAL-2023-7021 checkmarx 2 IOCs
  • PyPI
    libedramlgtb all versions
    MAL-2023-3977 checkmarx 2 IOCs
  • PyPI
    esqverpostcontrol all versions
    MAL-2023-3523 checkmarx 2 IOCs
  • PyPI
    esqminepymc all versions
    MAL-2023-3125 checkmarx 2 IOCs
  • PyPI
    selfvisareplacemc all versions
    MAL-2023-6782 checkmarx 2 IOCs
  • PyPI
    selfgrandgametool all versions
    MAL-2023-6110 checkmarx 2 IOCs