Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    libadcvpip all versions
    MAL-2023-3859 checkmarx 2 IOCs
  • PyPI
    tpgetgetmc all versions
    MAL-2023-7046 checkmarx 2 IOCs
  • PyPI
    py-cpucvpost all versions
    MAL-2023-5043 checkmarx 2 IOCs
  • PyPI
    liblibhttpinfo all versions
    MAL-2023-4180 checkmarx 2 IOCs
  • PyPI
    tpvisahydracpu all versions
    MAL-2023-7720 checkmarx 2 IOCs
  • PyPI
    tpstrpycv all versions
    MAL-2023-7628 checkmarx 2 IOCs
  • PyPI
    selfultranvidiapull all versions
    MAL-2023-6710 checkmarx 2 IOCs
  • PyPI
    selfsplitcpuload all versions
    MAL-2023-6618 checkmarx 2 IOCs
  • PyPI
    selfpullvisaed all versions
    MAL-2023-6515 checkmarx 2 IOCs
  • PyPI
    selfloadpushtool all versions
    MAL-2023-6295 checkmarx 2 IOCs
  • PyPI
    py-guistrcraft all versions
    MAL-2023-5145 checkmarx 2 IOCs
  • PyPI
    librandomguipip all versions
    MAL-2023-4456 checkmarx 2 IOCs
  • PyPI
    libmcrandompep all versions
    MAL-2023-4238 checkmarx 2 IOCs
  • PyPI
    esqvmpongstring all versions
    MAL-2023-3568 checkmarx 2 IOCs
  • PyPI
    esqvirtuallibgrand all versions
    MAL-2023-3535 checkmarx 2 IOCs
  • PyPI
    esqguipywhttp all versions
    MAL-2023-2937 checkmarx 2 IOCs
  • PyPI
    tpmcstrinfo all versions
    MAL-2023-7266 checkmarx 2 IOCs
  • PyPI
    py-vmlibstudy all versions
    MAL-2023-5785 checkmarx 2 IOCs
  • PyPI
    py-mcmcmask all versions
    MAL-2023-5334 checkmarx 2 IOCs
  • PyPI
    py-craftguire all versions
    MAL-2023-5054 checkmarx 2 IOCs
  • PyPI
    py-candyhttpvirtual all versions
    MAL-2023-5004 checkmarx 2 IOCs
  • PyPI
    liburlcandylgtb all versions
    MAL-2023-4585 checkmarx 2 IOCs
  • PyPI
    libstudyencodere all versions
    MAL-2023-4532 checkmarx 2 IOCs
  • PyPI
    libpipccstudy all versions
    MAL-2023-4321 checkmarx 2 IOCs
  • PyPI
    esqhttpmaskpush all versions
    MAL-2023-2955 checkmarx 2 IOCs
  • PyPI
    tpvirtualcontrolpong all versions
    MAL-2023-7706 checkmarx 2 IOCs
  • PyPI
    tprandomsuperpull all versions
    MAL-2023-7527 checkmarx 2 IOCs
  • PyPI
    tppullosintcv all versions
    MAL-2023-7428 checkmarx 2 IOCs
  • PyPI
    tpencodepepmine all versions
    MAL-2023-7017 checkmarx 2 IOCs
  • PyPI
    selfcpupongkill all versions
    MAL-2023-5994 checkmarx 2 IOCs
  • PyPI
    py-cpumcpyw all versions
    MAL-2023-5048 checkmarx 2 IOCs
  • PyPI
    libpepproofstring all versions
    MAL-2023-4300 checkmarx 2 IOCs
  • PyPI
    libpepcontrolultra all versions
    MAL-2023-4294 checkmarx 2 IOCs
  • PyPI
    libminevisarand all versions
    MAL-2023-4248 checkmarx 2 IOCs
  • PyPI
    liblibcvsuper all versions
    MAL-2023-4177 checkmarx 2 IOCs
  • PyPI
    liblgtbpostinfo all versions
    MAL-2023-4166 checkmarx 2 IOCs
  • PyPI
    libcvminecandy all versions
    MAL-2023-3959 checkmarx 2 IOCs
  • PyPI
    esqstudytoollgtb all versions
    MAL-2023-3459 checkmarx 2 IOCs
  • PyPI
    esqstrpushmc all versions
    MAL-2023-3442 checkmarx 2 IOCs
  • PyPI
    tpguicvintel all versions
    MAL-2023-7077 checkmarx 2 IOCs