Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    selfmcproofvisa all versions
    MAL-2023-6327 checkmarx 2 IOCs
  • PyPI
    selfguistudyosint all versions
    MAL-2023-6136 checkmarx 2 IOCs
  • PyPI
    libproofultrasplit all versions
    MAL-2023-4374 checkmarx 2 IOCs
  • PyPI
    libnvidiarecontrol all versions
    MAL-2023-4260 checkmarx 2 IOCs
  • PyPI
    libccurlcv all versions
    MAL-2023-3898 checkmarx 2 IOCs
  • PyPI
    esqpostpingkill all versions
    MAL-2023-3237 checkmarx 2 IOCs
  • PyPI
    esqintelreplacepull all versions
    MAL-2023-3002 checkmarx 2 IOCs
  • PyPI
    tpstringvmstring all versions
    MAL-2023-7617 checkmarx 2 IOCs
  • PyPI
    selfpaypalmasktool all versions
    MAL-2023-6391 checkmarx 2 IOCs
  • PyPI
    selfpaypalkillproof all versions
    MAL-2023-6389 checkmarx 2 IOCs
  • PyPI
    py-randompepvm all versions
    MAL-2023-5576 checkmarx 2 IOCs
  • PyPI
    py-nvidiaverhacked all versions
    MAL-2023-5377 checkmarx 2 IOCs
  • PyPI
    py-infopiplgtb all versions
    MAL-2023-5215 checkmarx 2 IOCs
  • PyPI
    esqintrandhttp all versions
    MAL-2023-3015 checkmarx 2 IOCs
  • PyPI
    esqgrandsplitpaypal all versions
    MAL-2023-2920 checkmarx 2 IOCs
  • PyPI
    esqcpucandyvirtual all versions
    MAL-2023-2787 checkmarx 2 IOCs
  • PyPI
    tpreplacekillcpu all versions
    MAL-2023-7558 checkmarx 2 IOCs
  • PyPI
    tppiposintcc all versions
    MAL-2023-7363 checkmarx 2 IOCs
  • PyPI
    selfverintelurl all versions
    MAL-2023-6739 checkmarx 2 IOCs
  • PyPI
    selfloadccpy all versions
    MAL-2023-6283 checkmarx 2 IOCs
  • PyPI
    selfhttpstrver all versions
    MAL-2023-6176 checkmarx 2 IOCs
  • PyPI
    py-pullstrintel all versions
    MAL-2023-5509 checkmarx 2 IOCs
  • PyPI
    py-pongpongpong all versions
    MAL-2023-5460 checkmarx 2 IOCs
  • PyPI
    esqvmnvidiacraft all versions
    MAL-2023-3566 checkmarx 2 IOCs
  • PyPI
    tpvirtualramget all versions
    MAL-2023-7714 checkmarx 2 IOCs
  • PyPI
    tppippinginfo all versions
    MAL-2023-7365 checkmarx 2 IOCs
  • PyPI
    selfstrloadnvidia all versions
    MAL-2023-6647 checkmarx 2 IOCs
  • PyPI
    selfkillhydraping all versions
    MAL-2023-6246 checkmarx 2 IOCs
  • PyPI
    py-ccguigrand all versions
    MAL-2023-5017 checkmarx 2 IOCs
  • PyPI
    libpongproofload all versions
    MAL-2023-4338 checkmarx 2 IOCs
  • PyPI
    esqtoolintelpaypal all versions
    MAL-2023-3479 checkmarx 2 IOCs
  • PyPI
    esqreplacepaypalstr all versions
    MAL-2023-3372 checkmarx 2 IOCs
  • PyPI
    esqpushmcstring all versions
    MAL-2023-3283 checkmarx 2 IOCs
  • PyPI
    esqpostosintpush all versions
    MAL-2023-3236 checkmarx 2 IOCs
  • PyPI
    esqlgtbpostpip all versions
    MAL-2023-3043 checkmarx 2 IOCs
  • PyPI
    tpgetultrapush all versions
    MAL-2023-7057 checkmarx 2 IOCs
  • PyPI
    selfguivisareplace all versions
    MAL-2023-6139 checkmarx 2 IOCs
  • PyPI
    py-gameedcc all versions
    MAL-2023-5106 checkmarx 2 IOCs
  • PyPI
    libverinteltool all versions
    MAL-2023-4609 checkmarx 2 IOCs
  • PyPI
    libpushultrapull all versions
    MAL-2023-4405 checkmarx 2 IOCs