Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqmcintel all versions
    MAL-2023-3104 checkmarx 2 IOCs
  • PyPI
    esqadnvidia all versions
    MAL-2023-2731 checkmarx 2 IOCs
  • PyPI
    tpstudyed all versions
    MAL-2023-7634 checkmarx 2 IOCs
  • PyPI
    tppeprand all versions
    MAL-2023-7340 checkmarx 2 IOCs
  • PyPI
    py-splitpullvisa all versions
    MAL-2023-5623 checkmarx 2 IOCs
  • PyPI
    py-postencodeencode all versions
    MAL-2023-5466 checkmarx 2 IOCs
  • PyPI
    py-adencodeping all versions
    MAL-2023-4985 checkmarx 2 IOCs
  • PyPI
    libadcandy all versions
    MAL-2023-3857 checkmarx 2 IOCs
  • PyPI
    selflgtbcvvm all versions
    MAL-2023-6257 checkmarx 2 IOCs
  • PyPI
    py-pywsupercc all versions
    MAL-2023-5541 checkmarx 2 IOCs
  • PyPI
    py-maskgrandcandy all versions
    MAL-2023-5317 checkmarx 2 IOCs
  • PyPI
    librandomcandycontrol all versions
    MAL-2023-4450 checkmarx 2 IOCs
  • PyPI
    esqrandpy all versions
    MAL-2023-3350 checkmarx 2 IOCs
  • PyPI
    esqrandomhydrainfo all versions
    MAL-2023-3338 checkmarx 2 IOCs
  • PyPI
    esqhackedpycpu all versions
    MAL-2023-2945 checkmarx 2 IOCs
  • PyPI
    tpmcosint all versions
    MAL-2023-7262 checkmarx 2 IOCs
  • PyPI
    tpmaskpaypalmc all versions
    MAL-2023-7244 checkmarx 2 IOCs
  • PyPI
    selfloadnvidia all versions
    MAL-2023-6292 checkmarx 2 IOCs
  • PyPI
    selfgamegui all versions
    MAL-2023-6071 checkmarx 2 IOCs
  • PyPI
    py-pipcvad all versions
    MAL-2023-5442 checkmarx 2 IOCs
  • PyPI
    libpostcpumine all versions
    MAL-2023-4347 checkmarx 2 IOCs
  • PyPI
    esqgrandnvidialib all versions
    MAL-2023-2913 checkmarx 2 IOCs
  • PyPI
    tpgamerandom all versions
    MAL-2023-7038 checkmarx 2 IOCs
  • PyPI
    tpencodevmrandom all versions
    MAL-2023-7026 checkmarx 2 IOCs
  • PyPI
    tpencodevirtual all versions
    MAL-2023-7025 checkmarx 2 IOCs
  • PyPI
    tpcontrolgetlib all versions
    MAL-2023-6943 checkmarx 2 IOCs
  • PyPI
    py-craftreplacegui all versions
    MAL-2023-5060 checkmarx 2 IOCs
  • PyPI
    esqmaskpingultra all versions
    MAL-2023-3089 checkmarx 2 IOCs
  • PyPI
    tppostcandypong all versions
    MAL-2023-7387 checkmarx 2 IOCs
  • PyPI
    esqultraosintlgtb all versions
    MAL-2023-3495 checkmarx 2 IOCs
  • PyPI
    esqcpucpure all versions
    MAL-2023-2789 checkmarx 2 IOCs
  • PyPI
    tppywcraftcontrol all versions
    MAL-2023-7480 checkmarx 2 IOCs
  • PyPI
    selfencodepost all versions
    MAL-2023-6054 checkmarx 2 IOCs
  • PyPI
    py-maskmaskintel all versions
    MAL-2023-5321 checkmarx 2 IOCs
  • PyPI
    esqvmrampyw all versions
    MAL-2023-3571 checkmarx 2 IOCs
  • PyPI
    esqpostrand all versions
    MAL-2023-3240 checkmarx 2 IOCs
  • PyPI
    esqguimc all versions
    MAL-2023-2929 checkmarx 2 IOCs
  • PyPI
    tpreplacevirtual all versions
    MAL-2023-7566 checkmarx 2 IOCs
  • PyPI
    tpremineosint all versions
    MAL-2023-7552 checkmarx 2 IOCs
  • PyPI
    py-httpultrakill all versions
    MAL-2023-5188 checkmarx 2 IOCs