Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfinteladencode all versions
    MAL-2023-6218 checkmarx 2 IOCs
  • PyPI
    py-maskstringcpu all versions
    MAL-2023-5327 checkmarx 2 IOCs
  • PyPI
    py-candycandypull all versions
    MAL-2023-5000 checkmarx 2 IOCs
  • PyPI
    esqsplithttposint all versions
    MAL-2023-3394 checkmarx 2 IOCs
  • PyPI
    esqreplaceurlre all versions
    MAL-2023-3376 checkmarx 2 IOCs
  • PyPI
    esqgamehackedmine all versions
    MAL-2023-2871 checkmarx 2 IOCs
  • PyPI
    selfpostminegui all versions
    MAL-2023-6475 checkmarx 2 IOCs
  • PyPI
    py-osintcontrolproof all versions
    MAL-2023-5378 checkmarx 2 IOCs
  • PyPI
    py-nvidiahydraget all versions
    MAL-2023-5362 checkmarx 2 IOCs
  • PyPI
    py-lgtbgrandpull all versions
    MAL-2023-5273 checkmarx 2 IOCs
  • PyPI
    selftoolvisaping all versions
    MAL-2023-6700 checkmarx 2 IOCs
  • PyPI
    selframsplitstring all versions
    MAL-2023-6561 checkmarx 2 IOCs
  • PyPI
    selfinfostrpyw all versions
    MAL-2023-6213 checkmarx 2 IOCs
  • PyPI
    libmchydraint all versions
    MAL-2023-4227 checkmarx 2 IOCs
  • PyPI
    libhydraminepyw all versions
    MAL-2023-4084 checkmarx 2 IOCs
  • PyPI
    esqpullstudyproof all versions
    MAL-2023-3273 checkmarx 2 IOCs
  • PyPI
    tppongposthacked all versions
    MAL-2023-7380 checkmarx 2 IOCs
  • PyPI
    tpmaskverultra all versions
    MAL-2023-7250 checkmarx 2 IOCs
  • PyPI
    esqgetgrandcontrol all versions
    MAL-2023-2890 checkmarx 2 IOCs
  • PyPI
    selfverhackedpost all versions
    MAL-2023-6738 checkmarx 2 IOCs
  • PyPI
    selfpepmaskmask all versions
    MAL-2023-6409 checkmarx 2 IOCs
  • PyPI
    libencodeurlnvidia all versions
    MAL-2023-3989 checkmarx 2 IOCs
  • PyPI
    py-remaskvisa all versions
    MAL-2023-5594 checkmarx 2 IOCs
  • PyPI
    esqpongnvidiapull all versions
    MAL-2023-3217 checkmarx 2 IOCs
  • PyPI
    selfpyccvisa all versions
    MAL-2023-6522 checkmarx 2 IOCs
  • PyPI
    py-paypalultrapep all versions
    MAL-2023-5407 checkmarx 2 IOCs
  • PyPI
    libmaskproofpep all versions
    MAL-2023-4213 checkmarx 2 IOCs
  • PyPI
    tpinfopywram all versions
    MAL-2023-7141 checkmarx 2 IOCs
  • PyPI
    selfguigameurl all versions
    MAL-2023-6127 checkmarx 2 IOCs
  • PyPI
    py-getcandyvm all versions
    MAL-2023-5116 checkmarx 2 IOCs
  • PyPI
    py-killpaypalurl all versions
    MAL-2023-5265 checkmarx 2 IOCs
  • PyPI
    tpstringrerand all versions
    MAL-2023-7615 checkmarx 2 IOCs
  • PyPI
    libproofpywping all versions
    MAL-2023-4372 checkmarx 2 IOCs
  • PyPI
    libcraftsplitint all versions
    MAL-2023-3949 checkmarx 2 IOCs
  • PyPI
    tpnvidiapullpep all versions
    MAL-2023-7296 checkmarx 2 IOCs
  • PyPI
    libpycpucontrol all versions
    MAL-2023-4410 checkmarx 2 IOCs
  • PyPI
    libpullsuperpaypal all versions
    MAL-2023-4386 checkmarx 2 IOCs
  • PyPI
    libadurlcraft all versions
    MAL-2023-3871 checkmarx 2 IOCs
  • PyPI
    esqsplitpostint all versions
    MAL-2023-3402 checkmarx 2 IOCs
  • PyPI
    esqedurlpong all versions
    MAL-2023-2851 checkmarx 2 IOCs