Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqgrandrampong all versions
    MAL-2023-2919 checkmarx 2 IOCs
  • PyPI
    esqadintellgtb all versions
    MAL-2023-2727 checkmarx 2 IOCs
  • PyPI
    tpvisaintelint all versions
    MAL-2023-7722 checkmarx 2 IOCs
  • PyPI
    tppaypalcckill all versions
    MAL-2023-7319 checkmarx 2 IOCs
  • PyPI
    py-studygetultra all versions
    MAL-2023-5661 checkmarx 2 IOCs
  • PyPI
    esqguipeppaypal all versions
    MAL-2023-2930 checkmarx 2 IOCs
  • PyPI
    esqencoderandintel all versions
    MAL-2023-2862 checkmarx 2 IOCs
  • PyPI
    tpreramcpu all versions
    MAL-2023-7572 checkmarx 2 IOCs
  • PyPI
    tposintsplitintel all versions
    MAL-2023-7316 checkmarx 2 IOCs
  • PyPI
    tpcandystrurl all versions
    MAL-2023-6932 checkmarx 2 IOCs
  • PyPI
    py-ultrapywload all versions
    MAL-2023-5714 checkmarx 2 IOCs
  • PyPI
    libpepramvm all versions
    MAL-2023-4302 checkmarx 2 IOCs
  • PyPI
    libmcpipver all versions
    MAL-2023-4235 checkmarx 2 IOCs
  • PyPI
    esqcontrollibmine all versions
    MAL-2023-2782 checkmarx 2 IOCs
  • PyPI
    esqcontrolhackedvm all versions
    MAL-2023-2777 checkmarx 2 IOCs
  • PyPI
    selfpushramhttp all versions
    MAL-2023-6519 checkmarx 2 IOCs
  • PyPI
    selfccedreplace all versions
    MAL-2023-5955 checkmarx 2 IOCs
  • PyPI
    py-toolcontrolproof all versions
    MAL-2023-5690 checkmarx 2 IOCs
  • PyPI
    esqstudyvirtualed all versions
    MAL-2023-3461 checkmarx 2 IOCs
  • PyPI
    esqminegrandget all versions
    MAL-2023-3118 checkmarx 2 IOCs
  • PyPI
    esqgrandcandyload all versions
    MAL-2023-2909 checkmarx 2 IOCs
  • PyPI
    selfgetverpep all versions
    MAL-2023-6103 checkmarx 2 IOCs
  • PyPI
    libpushramvisa all versions
    MAL-2023-4401 checkmarx 2 IOCs
  • PyPI
    libkillrandcandy all versions
    MAL-2023-4147 checkmarx 2 IOCs
  • PyPI
    libkillcontrolcandy all versions
    MAL-2023-4135 checkmarx 2 IOCs
  • PyPI
    libcandypushrand all versions
    MAL-2023-3881 checkmarx 2 IOCs
  • PyPI
    esqpyvmrand all versions
    MAL-2023-3300 checkmarx 2 IOCs
  • PyPI
    tprepygui all versions
    MAL-2023-7570 checkmarx 2 IOCs
  • PyPI
    libvmcved all versions
    MAL-2023-4654 checkmarx 2 IOCs
  • PyPI
    esqmcrandomget all versions
    MAL-2023-3111 checkmarx 2 IOCs
  • PyPI
    tposintlibintel all versions
    MAL-2023-7311 checkmarx 2 IOCs
  • PyPI
    selfreplacesuperpip all versions
    MAL-2023-6609 checkmarx 2 IOCs
  • PyPI
    selfproofstudyvisa all versions
    MAL-2023-6499 checkmarx 2 IOCs
  • PyPI
    selfosinturlget all versions
    MAL-2023-6380 checkmarx 2 IOCs
  • PyPI
    py-vmpullkill all versions
    MAL-2023-5788 checkmarx 2 IOCs
  • PyPI
    selfsupervmencode all versions
    MAL-2023-6685 checkmarx 2 IOCs
  • PyPI
    py-intcandysplit all versions
    MAL-2023-5224 checkmarx 2 IOCs
  • PyPI
    libpywintelrand all versions
    MAL-2023-4420 checkmarx 2 IOCs
  • PyPI
    libguistrpost all versions
    MAL-2023-4048 checkmarx 2 IOCs
  • PyPI
    tpramguipyw all versions
    MAL-2023-7502 checkmarx 2 IOCs