Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-intelosintosint all versions
    MAL-2023-5235 checkmarx 2 IOCs
  • PyPI
    libccgetsuper all versions
    MAL-2023-3890 checkmarx 2 IOCs
  • PyPI
    tpreplaceloadpong all versions
    MAL-2023-7562 checkmarx 2 IOCs
  • PyPI
    tppongultrapush all versions
    MAL-2023-7384 checkmarx 2 IOCs
  • PyPI
    selfccedpaypal all versions
    MAL-2023-5954 checkmarx 2 IOCs
  • PyPI
    py-cvstringed all versions
    MAL-2023-5076 checkmarx 2 IOCs
  • PyPI
    libpipultraproof all versions
    MAL-2023-4329 checkmarx 2 IOCs
  • PyPI
    libcontrolinfomine all versions
    MAL-2023-3906 checkmarx 2 IOCs
  • PyPI
    esqvmguigui all versions
    MAL-2023-3563 checkmarx 2 IOCs
  • PyPI
    esqpushccre all versions
    MAL-2023-3276 checkmarx 2 IOCs
  • PyPI
    esqpingadcandy all versions
    MAL-2023-3192 checkmarx 2 IOCs
  • PyPI
    esqcpurandomver all versions
    MAL-2023-2798 checkmarx 2 IOCs
  • PyPI
    tpsplitpystudy all versions
    MAL-2023-7592 checkmarx 2 IOCs
  • PyPI
    selfgetreplacepong all versions
    MAL-2023-6098 checkmarx 2 IOCs
  • PyPI
    py-replaceverreplace all versions
    MAL-2023-5610 checkmarx 2 IOCs
  • PyPI
    py-osintultraad all versions
    MAL-2023-5387 checkmarx 2 IOCs
  • PyPI
    py-infopullhydra all versions
    MAL-2023-5217 checkmarx 2 IOCs
  • PyPI
    py-cpucandyultra all versions
    MAL-2023-5042 checkmarx 2 IOCs
  • PyPI
    libverhackedhacked all versions
    MAL-2023-4607 checkmarx 2 IOCs
  • PyPI
    esqmaskcraftpull all versions
    MAL-2023-3081 checkmarx 2 IOCs
  • PyPI
    esqintpushgame all versions
    MAL-2023-3014 checkmarx 2 IOCs
  • PyPI
    tppullproofurl all versions
    MAL-2023-7433 checkmarx 2 IOCs
  • PyPI
    selflgtbpostcandy all versions
    MAL-2023-6263 checkmarx 2 IOCs
  • PyPI
    py-paypalloadver all versions
    MAL-2023-5397 checkmarx 2 IOCs
  • PyPI
    py-httpaded all versions
    MAL-2023-5173 checkmarx 2 IOCs
  • PyPI
    libvmpushrandom all versions
    MAL-2023-4662 checkmarx 2 IOCs
  • PyPI
    librandgrandpip all versions
    MAL-2023-4442 checkmarx 2 IOCs
  • PyPI
    esqvisacpucraft all versions
    MAL-2023-3541 checkmarx 2 IOCs
  • PyPI
    esqultragrandgame all versions
    MAL-2023-3493 checkmarx 2 IOCs
  • PyPI
    esqosintpullproof all versions
    MAL-2023-3157 checkmarx 2 IOCs
  • PyPI
    esqccpostmask all versions
    MAL-2023-2761 checkmarx 2 IOCs
  • PyPI
    tppyliblgtb all versions
    MAL-2023-7468 checkmarx 2 IOCs
  • PyPI
    tplgtbencodecraft all versions
    MAL-2023-7198 checkmarx 2 IOCs
  • PyPI
    selfvirtualpippong all versions
    MAL-2023-6763 checkmarx 2 IOCs
  • PyPI
    selfpullstringver all versions
    MAL-2023-6514 checkmarx 2 IOCs
  • PyPI
    selfpaypalpywgame all versions
    MAL-2023-6397 checkmarx 2 IOCs
  • PyPI
    py-libpushram all versions
    MAL-2023-5296 checkmarx 2 IOCs
  • PyPI
    liblgtbproofpy all versions
    MAL-2023-4168 checkmarx 2 IOCs
  • PyPI
    selfosintstudyhttp all versions
    MAL-2023-6377 checkmarx 2 IOCs
  • PyPI
    py-pongvmstring all versions
    MAL-2023-5464 checkmarx 2 IOCs