Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    esqsuperintelmc all versions
    MAL-2023-3467 checkmarx 2 IOCs
  • PyPI
    tphackedgrandkill all versions
    MAL-2023-7096 checkmarx 2 IOCs
  • PyPI
    selfhttpmc all versions
    MAL-2023-6166 checkmarx 2 IOCs
  • PyPI
    py-proofpong all versions
    MAL-2023-5489 checkmarx 2 IOCs
  • PyPI
    py-adadcc all versions
    MAL-2023-4982 checkmarx 2 IOCs
  • PyPI
    libpepram all versions
    MAL-2023-4301 checkmarx 2 IOCs
  • PyPI
    py-httppost all versions
    MAL-2023-5181 checkmarx 2 IOCs
  • PyPI
    libintelinfo all versions
    MAL-2023-4115 checkmarx 2 IOCs
  • PyPI
    esqinttool all versions
    MAL-2023-3021 checkmarx 2 IOCs
  • PyPI
    py-pushintelhydra all versions
    MAL-2023-5517 checkmarx 2 IOCs
  • PyPI
    libhydravered all versions
    MAL-2023-4092 checkmarx 2 IOCs
  • PyPI
    tpmcencode all versions
    MAL-2023-7256 checkmarx 2 IOCs
  • PyPI
    selfgetintelgame all versions
    MAL-2023-6092 checkmarx 2 IOCs
  • PyPI
    esqmcmine all versions
    MAL-2023-3105 checkmarx 2 IOCs
  • PyPI
    selfcpuramultra all versions
    MAL-2023-5996 checkmarx 2 IOCs
  • PyPI
    tppycpurand all versions
    MAL-2023-7455 checkmarx 2 IOCs
  • PyPI
    tppinghydra all versions
    MAL-2023-7348 checkmarx 2 IOCs
  • PyPI
    selfhackednvidiamc all versions
    MAL-2023-6155 checkmarx 2 IOCs
  • PyPI
    py-maskinfostudy all versions
    MAL-2023-5320 checkmarx 2 IOCs
  • PyPI
    py-hackedkillcv all versions
    MAL-2023-5157 checkmarx 2 IOCs
  • PyPI
    libmcget all versions
    MAL-2023-4226 checkmarx 2 IOCs
  • PyPI
    esqproofcandylgtb all versions
    MAL-2023-3244 checkmarx 2 IOCs
  • PyPI
    esqnvidiainfo all versions
    MAL-2023-3133 checkmarx 2 IOCs
  • PyPI
    esqkillsplitpull all versions
    MAL-2023-3035 checkmarx 2 IOCs
  • PyPI
    esqgamelgtb all versions
    MAL-2023-2873 checkmarx 2 IOCs
  • PyPI
    esqcpuvmvirtual all versions
    MAL-2023-2801 checkmarx 2 IOCs
  • PyPI
    tppushpullvisa all versions
    MAL-2023-7449 checkmarx 2 IOCs
  • PyPI
    selfponged all versions
    MAL-2023-6455 checkmarx 2 IOCs
  • PyPI
    py-visakill all versions
    MAL-2023-5763 checkmarx 2 IOCs
  • PyPI
    py-httpreplace all versions
    MAL-2023-5183 checkmarx 2 IOCs
  • PyPI
    py-ccvmtool all versions
    MAL-2023-5025 checkmarx 2 IOCs
  • PyPI
    libmcrandomre all versions
    MAL-2023-4239 checkmarx 2 IOCs
  • PyPI
    liblgtbgamesplit all versions
    MAL-2023-4157 checkmarx 2 IOCs
  • PyPI
    libgetpullmine all versions
    MAL-2023-4005 checkmarx 2 IOCs
  • PyPI
    esqramurl all versions
    MAL-2023-3328 checkmarx 2 IOCs
  • PyPI
    esqencodenvidiaurl all versions
    MAL-2023-2859 checkmarx 2 IOCs
  • PyPI
    tpintping all versions
    MAL-2023-7176 checkmarx 2 IOCs
  • PyPI
    tphydramask all versions
    MAL-2023-7126 checkmarx 2 IOCs
  • PyPI
    selfpywpaypalsplit all versions
    MAL-2023-6544 checkmarx 2 IOCs
  • PyPI
    selfcontrolosint all versions
    MAL-2023-5977 checkmarx 2 IOCs