Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    py-rerandom all versions
    MAL-2023-5612 checkmarx 2 IOCs
  • PyPI
    py-pullrand all versions
    MAL-2023-5507 checkmarx 2 IOCs
  • PyPI
    libkillcv all versions
    MAL-2023-4137 checkmarx 2 IOCs
  • PyPI
    esqpiplibrandom all versions
    MAL-2023-3210 checkmarx 2 IOCs
  • PyPI
    tpadmask all versions
    MAL-2023-6906 checkmarx 2 IOCs
  • PyPI
    selfpywsplitsuper all versions
    MAL-2023-6551 checkmarx 2 IOCs
  • PyPI
    selfpypull all versions
    MAL-2023-6530 checkmarx 2 IOCs
  • PyPI
    selfhackedintload all versions
    MAL-2023-6148 checkmarx 2 IOCs
  • PyPI
    selfguilibstring all versions
    MAL-2023-6131 checkmarx 2 IOCs
  • PyPI
    libpaypalosintvisa all versions
    MAL-2023-4285 checkmarx 2 IOCs
  • PyPI
    libadosint all versions
    MAL-2023-3862 checkmarx 2 IOCs
  • PyPI
    esqvmpyw all versions
    MAL-2023-3569 checkmarx 2 IOCs
  • PyPI
    selfvmcontrol all versions
    MAL-2023-6791 checkmarx 2 IOCs
  • PyPI
    selfrandlgtb all versions
    MAL-2023-6565 checkmarx 2 IOCs
  • PyPI
    selfgamestring all versions
    MAL-2023-6085 checkmarx 2 IOCs
  • PyPI
    py-inforandom all versions
    MAL-2023-5219 checkmarx 2 IOCs
  • PyPI
    libvirtualpushpy all versions
    MAL-2023-4632 checkmarx 2 IOCs
  • PyPI
    librandomstudy all versions
    MAL-2023-4461 checkmarx 2 IOCs
  • PyPI
    libloadpaypalrandom all versions
    MAL-2023-4195 checkmarx 2 IOCs
  • PyPI
    esqreplacerandom all versions
    MAL-2023-3375 checkmarx 2 IOCs
  • PyPI
    esqrehydraencode all versions
    MAL-2023-3361 checkmarx 2 IOCs
  • PyPI
    selfremask all versions
    MAL-2023-6599 checkmarx 2 IOCs
  • PyPI
    selfpongnvidia all versions
    MAL-2023-6460 checkmarx 2 IOCs
  • PyPI
    py-candyreplace all versions
    MAL-2023-5012 checkmarx 2 IOCs
  • PyPI
    libcraftcontrolcraft all versions
    MAL-2023-3937 checkmarx 2 IOCs
  • PyPI
    esqramreplacestudy all versions
    MAL-2023-3326 checkmarx 2 IOCs
  • PyPI
    esqpaypalinfogui all versions
    MAL-2023-3167 checkmarx 2 IOCs
  • PyPI
    esqosintpushcpu all versions
    MAL-2023-3158 checkmarx 2 IOCs
  • PyPI
    tppushgrandcraft all versions
    MAL-2023-7443 checkmarx 2 IOCs
  • PyPI
    tpmcrandpyw all versions
    MAL-2023-7265 checkmarx 2 IOCs
  • PyPI
    selfhydrastringpip all versions
    MAL-2023-6189 checkmarx 2 IOCs
  • PyPI
    py-studykill all versions
    MAL-2023-5664 checkmarx 2 IOCs
  • PyPI
    py-intpep all versions
    MAL-2023-5246 checkmarx 2 IOCs
  • PyPI
    libtoolram all versions
    MAL-2023-4568 checkmarx 2 IOCs
  • PyPI
    libpostpushping all versions
    MAL-2023-4362 checkmarx 2 IOCs
  • PyPI
    libintint all versions
    MAL-2023-4126 checkmarx 2 IOCs
  • PyPI
    libedpephttp all versions
    MAL-2023-3973 checkmarx 2 IOCs
  • PyPI
    esqmcgame all versions
    MAL-2023-3100 checkmarx 2 IOCs
  • PyPI
    tppipstrstr all versions
    MAL-2023-7372 checkmarx 2 IOCs
  • PyPI
    tplgtbmcultra all versions
    MAL-2023-7202 checkmarx 2 IOCs