Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-cvloadpull all versions
    MAL-2023-5068 checkmarx 2 IOCs
  • PyPI
    tplibrandomstring all versions
    MAL-2023-7214 checkmarx 2 IOCs
  • PyPI
    libpycontrolsuper all versions
    MAL-2023-4409 checkmarx 2 IOCs
  • PyPI
    esqvisaedproof all versions
    MAL-2023-3542 checkmarx 2 IOCs
  • PyPI
    tpstringmcstring all versions
    MAL-2023-7612 checkmarx 2 IOCs
  • PyPI
    selfencodepinghydra all versions
    MAL-2023-6053 checkmarx 2 IOCs
  • PyPI
    py-ramedre all versions
    MAL-2023-5545 checkmarx 2 IOCs
  • PyPI
    esqpingcvultra all versions
    MAL-2023-3195 checkmarx 2 IOCs
  • PyPI
    esqpeppywvirtual all versions
    MAL-2023-3186 checkmarx 2 IOCs
  • PyPI
    py-stringadvm all versions
    MAL-2023-5631 checkmarx 2 IOCs
  • PyPI
    tploadguistring all versions
    MAL-2023-7226 checkmarx 2 IOCs
  • PyPI
    selfpinglgtblib all versions
    MAL-2023-6426 checkmarx 2 IOCs
  • PyPI
    selfhackededhydra all versions
    MAL-2023-6145 checkmarx 2 IOCs
  • PyPI
    libinfopiphttp all versions
    MAL-2023-4104 checkmarx 2 IOCs
  • PyPI
    tpencodeedpaypal all versions
    MAL-2023-7014 checkmarx 2 IOCs
  • PyPI
    selfccverosint all versions
    MAL-2023-5965 checkmarx 2 IOCs
  • PyPI
    esqintlgtbpost all versions
    MAL-2023-3009 checkmarx 2 IOCs
  • PyPI
    esqgetgrandlgtb all versions
    MAL-2023-2891 checkmarx 2 IOCs
  • PyPI
    esqgrandproofhydra all versions
    MAL-2023-2916 checkmarx 2 IOCs
  • PyPI
    py-pyencodeload all versions
    MAL-2023-5523 checkmarx 2 IOCs
  • PyPI
    libnvidiapeppull all versions
    MAL-2023-4257 checkmarx 2 IOCs
  • PyPI
    py-minelibcc all versions
    MAL-2023-5348 checkmarx 2 IOCs
  • PyPI
    tposinthydraed all versions
    MAL-2023-7309 checkmarx 2 IOCs
  • PyPI
    libintelccload all versions
    MAL-2023-4113 checkmarx 2 IOCs
  • PyPI
    libhydrareplacere all versions
    MAL-2023-4088 checkmarx 2 IOCs
  • PyPI
    py-mcvirtualpy all versions
    MAL-2023-5345 checkmarx 2 IOCs
  • PyPI
    tphttpgetvisa all versions
    MAL-2023-7112 checkmarx 2 IOCs
  • PyPI
    esqvergameosint all versions
    MAL-2023-3514 checkmarx 2 IOCs
  • PyPI
    selfvisaverrand all versions
    MAL-2023-6784 checkmarx 2 IOCs
  • PyPI
    selfencodeverosint all versions
    MAL-2023-6064 checkmarx 2 IOCs
  • PyPI
    libpywedosint all versions
    MAL-2023-4417 checkmarx 2 IOCs
  • PyPI
    liblgtbstringgame all versions
    MAL-2023-4172 checkmarx 2 IOCs
  • PyPI
    selfmcmaskintel all versions
    MAL-2023-6324 checkmarx 2 IOCs
  • PyPI
    libpepreplacegui all versions
    MAL-2023-4304 checkmarx 2 IOCs
  • PyPI
    selfpippushhttp all versions
    MAL-2023-6448 checkmarx 2 IOCs
  • PyPI
    tpreedpep all versions
    MAL-2023-7545 checkmarx 2 IOCs
  • PyPI
    libhttposintgame all versions
    MAL-2023-4075 checkmarx 2 IOCs
  • PyPI
    tpmaskvisa all versions
    MAL-2023-7251 checkmarx 2 IOCs
  • PyPI
    selfstringmaskvirtual all versions
    MAL-2023-6638 checkmarx 2 IOCs
  • PyPI
    selfpingrampep all versions
    MAL-2023-6433 checkmarx 2 IOCs