Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libpeppingpyw all versions
    MAL-2023-4297 checkmarx 2 IOCs
  • PyPI
    libgettooltool all versions
    MAL-2023-4011 checkmarx 2 IOCs
  • PyPI
    tpgamecandycandy all versions
    MAL-2023-7027 checkmarx 2 IOCs
  • PyPI
    selfverlgtbrand all versions
    MAL-2023-6741 checkmarx 2 IOCs
  • PyPI
    selfpaypalsplited all versions
    MAL-2023-6400 checkmarx 2 IOCs
  • PyPI
    selfpullpywcandy all versions
    MAL-2023-6508 checkmarx 2 IOCs
  • PyPI
    selfhttpcvstr all versions
    MAL-2023-6162 checkmarx 2 IOCs
  • PyPI
    selfhydrahydrasplit all versions
    MAL-2023-6180 checkmarx 2 IOCs
  • PyPI
    libvisahackedvisa all versions
    MAL-2023-4641 checkmarx 2 IOCs
  • PyPI
    esqosintstudymine all versions
    MAL-2023-3159 checkmarx 2 IOCs
  • PyPI
    tpintelguicv all versions
    MAL-2023-7156 checkmarx 2 IOCs
  • PyPI
    esqpywrandomcc all versions
    MAL-2023-3316 checkmarx 2 IOCs
  • PyPI
    esqramlibed all versions
    MAL-2023-3324 checkmarx 2 IOCs
  • PyPI
    esqadvmpong all versions
    MAL-2023-2741 checkmarx 2 IOCs
  • PyPI
    tppullmaskinfo all versions
    MAL-2023-7426 checkmarx 2 IOCs
  • PyPI
    tploadcraftint all versions
    MAL-2023-7221 checkmarx 2 IOCs
  • PyPI
    tpkillcchacked all versions
    MAL-2023-7181 checkmarx 2 IOCs
  • PyPI
    selfintstudyhttp all versions
    MAL-2023-6235 checkmarx 2 IOCs
  • PyPI
    libpongsuperpip all versions
    MAL-2023-4342 checkmarx 2 IOCs
  • PyPI
    libgeturlrandom all versions
    MAL-2023-4012 checkmarx 2 IOCs
  • PyPI
    esqvisapingreplace all versions
    MAL-2023-3549 checkmarx 2 IOCs
  • PyPI
    esqvirtualvisaosint all versions
    MAL-2023-3540 checkmarx 2 IOCs
  • PyPI
    esqstudyvirtualver all versions
    MAL-2023-3462 checkmarx 2 IOCs
  • PyPI
    esqrandmaskpost all versions
    MAL-2023-3334 checkmarx 2 IOCs
  • PyPI
    esqpostinfostr all versions
    MAL-2023-3230 checkmarx 2 IOCs
  • PyPI
    tppushpingpy all versions
    MAL-2023-7448 checkmarx 2 IOCs
  • PyPI
    py-nvidiagranded all versions
    MAL-2023-5359 checkmarx 2 IOCs
  • PyPI
    py-loadhydratool all versions
    MAL-2023-5304 checkmarx 2 IOCs
  • PyPI
    liburlnvidiapep all versions
    MAL-2023-4590 checkmarx 2 IOCs
  • PyPI
    libramguipull all versions
    MAL-2023-4432 checkmarx 2 IOCs
  • PyPI
    liblgtbstrsuper all versions
    MAL-2023-4173 checkmarx 2 IOCs
  • PyPI
    esqsupervisaultra all versions
    MAL-2023-3474 checkmarx 2 IOCs
  • PyPI
    tpreplacelgtbpull all versions
    MAL-2023-7560 checkmarx 2 IOCs
  • PyPI
    tpcandylgtbgame all versions
    MAL-2023-6926 checkmarx 2 IOCs
  • PyPI
    tpcandyedsplit all versions
    MAL-2023-6921 checkmarx 2 IOCs
  • PyPI
    selfpipguipull all versions
    MAL-2023-6441 checkmarx 2 IOCs
  • PyPI
    selfpaypalreed all versions
    MAL-2023-6399 checkmarx 2 IOCs
  • PyPI
    liblgtbedinfo all versions
    MAL-2023-4155 checkmarx 2 IOCs
  • PyPI
    esqguiencodestr all versions
    MAL-2023-2925 checkmarx 2 IOCs
  • PyPI
    esqguiadgrand all versions
    MAL-2023-2924 checkmarx 2 IOCs