Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfhttpmasknvidia all versions
    MAL-2023-6165 checkmarx 2 IOCs
  • PyPI
    libhttpliburl all versions
    MAL-2023-4074 checkmarx 2 IOCs
  • PyPI
    libadpepre all versions
    MAL-2023-3864 checkmarx 2 IOCs
  • PyPI
    esqmccandypong all versions
    MAL-2023-3096 checkmarx 2 IOCs
  • PyPI
    esqedpyint all versions
    MAL-2023-2845 checkmarx 2 IOCs
  • PyPI
    tpvisainfointel all versions
    MAL-2023-7721 checkmarx 2 IOCs
  • PyPI
    tppostintsplit all versions
    MAL-2023-7391 checkmarx 2 IOCs
  • PyPI
    selfnvidiarelib all versions
    MAL-2023-6356 checkmarx 2 IOCs
  • PyPI
    selfcraftlibpong all versions
    MAL-2023-6004 checkmarx 2 IOCs
  • PyPI
    selfadlibproof all versions
    MAL-2023-5939 checkmarx 2 IOCs
  • PyPI
    py-vmadpong all versions
    MAL-2023-5778 checkmarx 2 IOCs
  • PyPI
    libramccload all versions
    MAL-2023-4429 checkmarx 2 IOCs
  • PyPI
    liblgtbhydrainfo all versions
    MAL-2023-4160 checkmarx 2 IOCs
  • PyPI
    esqreplacepywcc all versions
    MAL-2023-3374 checkmarx 2 IOCs
  • PyPI
    esqcontrolhttppaypal all versions
    MAL-2023-2779 checkmarx 2 IOCs
  • PyPI
    tppongproofvm all versions
    MAL-2023-7381 checkmarx 2 IOCs
  • PyPI
    tpkillrandpull all versions
    MAL-2023-7195 checkmarx 2 IOCs
  • PyPI
    selfgrandvisagui all versions
    MAL-2023-6124 checkmarx 2 IOCs
  • PyPI
    libpongstringrand all versions
    MAL-2023-4341 checkmarx 2 IOCs
  • PyPI
    liblibpiprandom all versions
    MAL-2023-4184 checkmarx 2 IOCs
  • PyPI
    libhttpintelstr all versions
    MAL-2023-4071 checkmarx 2 IOCs
  • PyPI
    libcandyrandget all versions
    MAL-2023-3882 checkmarx 2 IOCs
  • PyPI
    esqinfohackedvisa all versions
    MAL-2023-2977 checkmarx 2 IOCs
  • PyPI
    esqcvccre all versions
    MAL-2023-2818 checkmarx 2 IOCs
  • PyPI
    tppushhackedint all versions
    MAL-2023-7444 checkmarx 2 IOCs
  • PyPI
    liblibpywre all versions
    MAL-2023-4187 checkmarx 2 IOCs
  • PyPI
    libhydracandymask all versions
    MAL-2023-4079 checkmarx 2 IOCs
  • PyPI
    esqnvidiaverpull all versions
    MAL-2023-3144 checkmarx 2 IOCs
  • PyPI
    esqinfopongping all versions
    MAL-2023-2984 checkmarx 2 IOCs
  • PyPI
    esqhackedcvpyw all versions
    MAL-2023-2940 checkmarx 2 IOCs
  • PyPI
    tploadloadstudy all versions
    MAL-2023-7231 checkmarx 2 IOCs
  • PyPI
    selftoolmctool all versions
    MAL-2023-6693 checkmarx 2 IOCs
  • PyPI
    selfsplitreplaceosint all versions
    MAL-2023-6626 checkmarx 2 IOCs
  • PyPI
    selfpyhydralgtb all versions
    MAL-2023-6524 checkmarx 2 IOCs
  • PyPI
    selflgtbosintreplace all versions
    MAL-2023-6260 checkmarx 2 IOCs
  • PyPI
    libhydrasupercpu all versions
    MAL-2023-4090 checkmarx 2 IOCs
  • PyPI
    esqrepushvm all versions
    MAL-2023-3378 checkmarx 2 IOCs
  • PyPI
    esqkillloadload all versions
    MAL-2023-3026 checkmarx 2 IOCs
  • PyPI
    tpkillpywpost all versions
    MAL-2023-7194 checkmarx 2 IOCs
  • PyPI
    selframpipmc all versions
    MAL-2023-6557 checkmarx 2 IOCs