Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libramreplacelgtb all versions
    MAL-2023-4437 checkmarx 2 IOCs
  • PyPI
    esqpywpoststudy all versions
    MAL-2023-3312 checkmarx 2 IOCs
  • PyPI
    esqpipgetgrand all versions
    MAL-2023-3208 checkmarx 2 IOCs
  • PyPI
    tpinfotoolcandy all versions
    MAL-2023-7145 checkmarx 2 IOCs
  • PyPI
    selfpaypalpepcc all versions
    MAL-2023-6394 checkmarx 2 IOCs
  • PyPI
    selfosintadsplit all versions
    MAL-2023-6359 checkmarx 2 IOCs
  • PyPI
    libpaypalcpugrand all versions
    MAL-2023-4281 checkmarx 2 IOCs
  • PyPI
    esqstudyponghacked all versions
    MAL-2023-3456 checkmarx 2 IOCs
  • PyPI
    tpverpygame all versions
    MAL-2023-7701 checkmarx 2 IOCs
  • PyPI
    selfstudyrecontrol all versions
    MAL-2023-6667 checkmarx 2 IOCs
  • PyPI
    selfhydranvidiamc all versions
    MAL-2023-6185 checkmarx 2 IOCs
  • PyPI
    libcraftosintnvidia all versions
    MAL-2023-3945 checkmarx 2 IOCs
  • PyPI
    esqhttpvirtualvm all versions
    MAL-2023-2962 checkmarx 2 IOCs
  • PyPI
    tpvmpostsuper all versions
    MAL-2023-7741 checkmarx 2 IOCs
  • PyPI
    selfpullsplitcv all versions
    MAL-2023-6511 checkmarx 2 IOCs
  • PyPI
    libencodepywkill all versions
    MAL-2023-3984 checkmarx 2 IOCs
  • PyPI
    esqminehackedcv all versions
    MAL-2023-3120 checkmarx 2 IOCs
  • PyPI
    tpintvisahacked all versions
    MAL-2023-7179 checkmarx 2 IOCs
  • PyPI
    py-studypongvisa all versions
    MAL-2023-5670 checkmarx 2 IOCs
  • PyPI
    py-pulladpy all versions
    MAL-2023-5496 checkmarx 2 IOCs
  • PyPI
    libnvidiaintmine all versions
    MAL-2023-4254 checkmarx 2 IOCs
  • PyPI
    esqresplitproof all versions
    MAL-2023-3385 checkmarx 2 IOCs
  • PyPI
    tpvmhydragrand all versions
    MAL-2023-7736 checkmarx 2 IOCs
  • PyPI
    selfrecvstudy all versions
    MAL-2023-6591 checkmarx 2 IOCs
  • PyPI
    selfpaypalpyrandom all versions
    MAL-2023-6396 checkmarx 2 IOCs
  • PyPI
    libsuperkilltool all versions
    MAL-2023-4550 checkmarx 2 IOCs
  • PyPI
    tppipproofstudy all versions
    MAL-2023-7367 checkmarx 2 IOCs
  • PyPI
    selfgetvirtualpull all versions
    MAL-2023-6104 checkmarx 2 IOCs
  • PyPI
    selfgamestringpush all versions
    MAL-2023-6086 checkmarx 2 IOCs
  • PyPI
    py-getosintpyw all versions
    MAL-2023-5122 checkmarx 2 IOCs
  • PyPI
    tpkillcpumine all versions
    MAL-2023-7182 checkmarx 2 IOCs
  • PyPI
    selfvisapullcv all versions
    MAL-2023-6780 checkmarx 2 IOCs
  • PyPI
    py-stringvisaosint all versions
    MAL-2023-5640 checkmarx 2 IOCs
  • PyPI
    esqvisavmload all versions
    MAL-2023-3558 checkmarx 2 IOCs
  • PyPI
    py-libcccandy all versions
    MAL-2023-5285 checkmarx 2 IOCs
  • PyPI
    esqcandyreplacereplace all versions
    MAL-2023-2750 checkmarx 2 IOCs
  • PyPI
    selfcpulgtbpip all versions
    MAL-2023-5990 checkmarx 2 IOCs
  • PyPI
    py-pycpuload all versions
    MAL-2023-5522 checkmarx 2 IOCs
  • PyPI
    libhttplgtbtool all versions
    MAL-2023-4073 checkmarx 2 IOCs
  • PyPI
    liblibpingad all versions
    MAL-2023-4183 checkmarx 2 IOCs