Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libpushinfogrand all versions
    MAL-2023-4396 checkmarx 2 IOCs
  • PyPI
    libvmlgtbpyw all versions
    MAL-2023-4655 checkmarx 2 IOCs
  • PyPI
    libcandyedpong all versions
    MAL-2023-3875 checkmarx 2 IOCs
  • PyPI
    tpstrrandomint all versions
    MAL-2023-7629 checkmarx 2 IOCs
  • PyPI
    tphydrapushstr all versions
    MAL-2023-7131 checkmarx 2 IOCs
  • PyPI
    esqpushrehttp all versions
    MAL-2023-3286 checkmarx 2 IOCs
  • PyPI
    esqadcpuhacked all versions
    MAL-2023-2720 checkmarx 2 IOCs
  • PyPI
    selfpostramstring all versions
    MAL-2023-6478 checkmarx 2 IOCs
  • PyPI
    py-pyproofinfo all versions
    MAL-2023-5529 checkmarx 2 IOCs
  • PyPI
    selfpypywpong all versions
    MAL-2023-6531 checkmarx 2 IOCs
  • PyPI
    libkillcraftver all versions
    MAL-2023-4136 checkmarx 2 IOCs
  • PyPI
    libedpywhttp all versions
    MAL-2023-3976 checkmarx 2 IOCs
  • PyPI
    libminevmre all versions
    MAL-2023-4249 checkmarx 2 IOCs
  • PyPI
    selfultraencodevm all versions
    MAL-2023-6703 checkmarx 2 IOCs
  • PyPI
    esqstringramgui all versions
    MAL-2023-3428 checkmarx 2 IOCs
  • PyPI
    tpintpaypalcc all versions
    MAL-2023-7175 checkmarx 2 IOCs
  • PyPI
    py-strrandomgame all versions
    MAL-2023-5654 checkmarx 2 IOCs
  • PyPI
    py-minepyencode all versions
    MAL-2023-5353 checkmarx 2 IOCs
  • PyPI
    py-intpyed all versions
    MAL-2023-5247 checkmarx 2 IOCs
  • PyPI
    py-toolproofpost all versions
    MAL-2023-5698 checkmarx 2 IOCs
  • PyPI
    py-mineguigrand all versions
    MAL-2023-5347 checkmarx 2 IOCs
  • PyPI
    esqcrafthackedgui all versions
    MAL-2023-2806 checkmarx 2 IOCs
  • PyPI
    tphydraproofcpu all versions
    MAL-2023-7130 checkmarx 2 IOCs
  • PyPI
    libvisaprooftool all versions
    MAL-2023-4647 checkmarx 2 IOCs
  • PyPI
    esqintlgtbcontrol all versions
    MAL-2023-3008 checkmarx 2 IOCs
  • PyPI
    selfpyhackedpush all versions
    MAL-2023-6523 checkmarx 2 IOCs
  • PyPI
    libpyosintinfo all versions
    MAL-2023-4414 checkmarx 2 IOCs
  • PyPI
    libnvidiavmad all versions
    MAL-2023-4263 checkmarx 2 IOCs
  • PyPI
    libinfoccgrand all versions
    MAL-2023-4096 checkmarx 2 IOCs
  • PyPI
    libencodestringver all versions
    MAL-2023-3986 checkmarx 2 IOCs
  • PyPI
    tppywccultra all versions
    MAL-2023-7479 checkmarx 2 IOCs
  • PyPI
    tpencodepywget all versions
    MAL-2023-7020 checkmarx 2 IOCs
  • PyPI
    selfhttppipsplit all versions
    MAL-2023-6169 checkmarx 2 IOCs
  • PyPI
    selfcontrolhackedpaypal all versions
    MAL-2023-5971 checkmarx 2 IOCs
  • PyPI
    libultracrafted all versions
    MAL-2023-4575 checkmarx 2 IOCs
  • PyPI
    selfgrandpipcontrol all versions
    MAL-2023-6116 checkmarx 2 IOCs
  • PyPI
    libcvpiphttp all versions
    MAL-2023-3960 checkmarx 2 IOCs
  • PyPI
    tppongosintmine all versions
    MAL-2023-7379 checkmarx 2 IOCs
  • PyPI
    selfgrandintgui all versions
    MAL-2023-6112 checkmarx 2 IOCs
  • PyPI
    py-pushsplitver all versions
    MAL-2023-5520 checkmarx 2 IOCs