Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-ultraintvisa all versions
    MAL-2023-5708 checkmarx 2 IOCs
  • PyPI
    py-replaceinfosplit all versions
    MAL-2023-5600 checkmarx 2 IOCs
  • PyPI
    py-ramintelpull all versions
    MAL-2023-5553 checkmarx 2 IOCs
  • PyPI
    py-lgtbosintproof all versions
    MAL-2023-5277 checkmarx 2 IOCs
  • PyPI
    tpgrandpyw all versions
    MAL-2023-7068 checkmarx 2 IOCs
  • PyPI
    selfminepong all versions
    MAL-2023-6342 checkmarx 2 IOCs
  • PyPI
    py-supergetint all versions
    MAL-2023-5681 checkmarx 2 IOCs
  • PyPI
    py-studypostgame all versions
    MAL-2023-5671 checkmarx 2 IOCs
  • PyPI
    py-intelinfo all versions
    MAL-2023-5231 checkmarx 2 IOCs
  • PyPI
    py-hackedram all versions
    MAL-2023-5166 checkmarx 2 IOCs
  • PyPI
    liblibint all versions
    MAL-2023-4181 checkmarx 2 IOCs
  • PyPI
    esqpullmine all versions
    MAL-2023-3267 checkmarx 2 IOCs
  • PyPI
    esqkillosintpost all versions
    MAL-2023-3027 checkmarx 2 IOCs
  • PyPI
    esqcandysplitpull all versions
    MAL-2023-2752 checkmarx 2 IOCs
  • PyPI
    py-prooflib all versions
    MAL-2023-5483 checkmarx 2 IOCs
  • PyPI
    py-poststudy all versions
    MAL-2023-5476 checkmarx 2 IOCs
  • PyPI
    libpongram all versions
    MAL-2023-4340 checkmarx 2 IOCs
  • PyPI
    esqreplaceguistudy all versions
    MAL-2023-3370 checkmarx 2 IOCs
  • PyPI
    tppaypalver all versions
    MAL-2023-7329 checkmarx 2 IOCs
  • PyPI
    tpintloadpep all versions
    MAL-2023-7173 checkmarx 2 IOCs
  • PyPI
    py-restringproof all versions
    MAL-2023-5614 checkmarx 2 IOCs
  • PyPI
    py-peprandompaypal all versions
    MAL-2023-5421 checkmarx 2 IOCs
  • PyPI
    tpcvpygui all versions
    MAL-2023-6992 checkmarx 2 IOCs
  • PyPI
    selfultrapywsuper all versions
    MAL-2023-6715 checkmarx 2 IOCs
  • PyPI
    selfsplitad all versions
    MAL-2023-6617 checkmarx 2 IOCs
  • PyPI
    selfrestr all versions
    MAL-2023-6616 checkmarx 2 IOCs
  • PyPI
    selfpippaypal all versions
    MAL-2023-6445 checkmarx 2 IOCs
  • PyPI
    selfadrand all versions
    MAL-2023-5944 checkmarx 2 IOCs
  • PyPI
    py-studyinfo all versions
    MAL-2023-5663 checkmarx 2 IOCs
  • PyPI
    py-pushinfo all versions
    MAL-2023-5515 checkmarx 2 IOCs
  • PyPI
    py-maskgetpong all versions
    MAL-2023-5315 checkmarx 2 IOCs
  • PyPI
    libmaskstudyrandom all versions
    MAL-2023-4218 checkmarx 2 IOCs
  • PyPI
    tpvirtualpywproof all versions
    MAL-2023-7713 checkmarx 2 IOCs
  • PyPI
    tppyproofpull all versions
    MAL-2023-7475 checkmarx 2 IOCs
  • PyPI
    tppaypalping all versions
    MAL-2023-7324 checkmarx 2 IOCs
  • PyPI
    tphydraping all versions
    MAL-2023-7127 checkmarx 2 IOCs
  • PyPI
    tpgrandloadload all versions
    MAL-2023-7064 checkmarx 2 IOCs
  • PyPI
    selfpushstr all versions
    MAL-2023-6520 checkmarx 2 IOCs
  • PyPI
    libhttppip all versions
    MAL-2023-4076 checkmarx 2 IOCs
  • PyPI
    esqurlintel all versions
    MAL-2023-3505 checkmarx 2 IOCs