Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfpiplibver all versions
    MAL-2023-6443 checkmarx 2 IOCs
  • PyPI
    py-paypalsplitpush all versions
    MAL-2023-5404 checkmarx 2 IOCs
  • PyPI
    py-httpreplacerand all versions
    MAL-2023-5184 checkmarx 2 IOCs
  • PyPI
    libkillstringreplace all versions
    MAL-2023-4150 checkmarx 2 IOCs
  • PyPI
    libguistudyram all versions
    MAL-2023-4049 checkmarx 2 IOCs
  • PyPI
    libgrandintelpy all versions
    MAL-2023-4018 checkmarx 2 IOCs
  • PyPI
    libcontrolkillload all versions
    MAL-2023-3909 checkmarx 2 IOCs
  • PyPI
    esqgetcraftstudy all versions
    MAL-2023-2888 checkmarx 2 IOCs
  • PyPI
    tpvirtuallgtbpull all versions
    MAL-2023-7709 checkmarx 2 IOCs
  • PyPI
    tpguiadcraft all versions
    MAL-2023-7072 checkmarx 2 IOCs
  • PyPI
    selfvirtualinfore all versions
    MAL-2023-6759 checkmarx 2 IOCs
  • PyPI
    selfmaskstudyint all versions
    MAL-2023-6311 checkmarx 2 IOCs
  • PyPI
    selfadpepgame all versions
    MAL-2023-5941 checkmarx 2 IOCs
  • PyPI
    py-lgtbreplacemc all versions
    MAL-2023-5284 checkmarx 2 IOCs
  • PyPI
    librandomadproof all versions
    MAL-2023-4449 checkmarx 2 IOCs
  • PyPI
    esqvirtualpywgrand all versions
    MAL-2023-3539 checkmarx 2 IOCs
  • PyPI
    esqurladver all versions
    MAL-2023-3500 checkmarx 2 IOCs
  • PyPI
    esqultraposthttp all versions
    MAL-2023-3496 checkmarx 2 IOCs
  • PyPI
    esqmctoolintel all versions
    MAL-2023-3113 checkmarx 2 IOCs
  • PyPI
    esqedgameultra all versions
    MAL-2023-2839 checkmarx 2 IOCs
  • PyPI
    esqadhydrapull all versions
    MAL-2023-2724 checkmarx 2 IOCs
  • PyPI
    tpproofreplacereplace all versions
    MAL-2023-7414 checkmarx 2 IOCs
  • PyPI
    tpminevervirtual all versions
    MAL-2023-7288 checkmarx 2 IOCs
  • PyPI
    py-osintvirtualgui all versions
    MAL-2023-5388 checkmarx 2 IOCs
  • PyPI
    py-nvidiapepnvidia all versions
    MAL-2023-5368 checkmarx 2 IOCs
  • PyPI
    py-grandpostver all versions
    MAL-2023-5132 checkmarx 2 IOCs
  • PyPI
    py-encodevirtualgui all versions
    MAL-2023-5103 checkmarx 2 IOCs
  • PyPI
    py-adtoolurl all versions
    MAL-2023-4999 checkmarx 2 IOCs
  • PyPI
    libhackedpepreplace all versions
    MAL-2023-4061 checkmarx 2 IOCs
  • PyPI
    libcraftmcrand all versions
    MAL-2023-3943 checkmarx 2 IOCs
  • PyPI
    esqposthttpstudy all versions
    MAL-2023-3229 checkmarx 2 IOCs
  • PyPI
    tpstudygetreplace all versions
    MAL-2023-7635 checkmarx 2 IOCs
  • PyPI
    selfcontrolhydramine all versions
    MAL-2023-5973 checkmarx 2 IOCs
  • PyPI
    libversupercv all versions
    MAL-2023-4617 checkmarx 2 IOCs
  • PyPI
    libtoolmcver all versions
    MAL-2023-4565 checkmarx 2 IOCs
  • PyPI
    libsupervisaed all versions
    MAL-2023-4558 checkmarx 2 IOCs
  • PyPI
    librandloadmine all versions
    MAL-2023-4447 checkmarx 2 IOCs
  • PyPI
    libpostvmgrand all versions
    MAL-2023-4365 checkmarx 2 IOCs
  • PyPI
    esqpepretool all versions
    MAL-2023-3188 checkmarx 2 IOCs
  • PyPI
    esqlibpushload all versions
    MAL-2023-3060 checkmarx 2 IOCs