Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,028 reports · Feed

  • PyPI
    tpgetpongre all versions
    MAL-2023-7051 checkmarx 2 IOCs
  • PyPI
    liburlpongpost all versions
    MAL-2023-4592 checkmarx 2 IOCs
  • PyPI
    esqrepyw all versions
    MAL-2023-3382 checkmarx 2 IOCs
  • PyPI
    tpedpyw all versions
    MAL-2023-7005 checkmarx 2 IOCs
  • PyPI
    tpcontrolpipint all versions
    MAL-2023-6951 checkmarx 2 IOCs
  • PyPI
    tpccloadget all versions
    MAL-2023-6935 checkmarx 2 IOCs
  • PyPI
    selfccsupervm all versions
    MAL-2023-5964 checkmarx 2 IOCs
  • PyPI
    py-toolproofpaypal all versions
    MAL-2023-5697 checkmarx 2 IOCs
  • PyPI
    py-hydragrandgame all versions
    MAL-2023-5195 checkmarx 2 IOCs
  • PyPI
    libvergameurl all versions
    MAL-2023-4605 checkmarx 2 IOCs
  • PyPI
    libreplacevm all versions
    MAL-2023-4487 checkmarx 2 IOCs
  • PyPI
    libpongproof all versions
    MAL-2023-4337 checkmarx 2 IOCs
  • PyPI
    tpsupergame all versions
    MAL-2023-7646 checkmarx 2 IOCs
  • PyPI
    selfstrtool all versions
    MAL-2023-6653 checkmarx 2 IOCs
  • PyPI
    libsplitpush all versions
    MAL-2023-4499 checkmarx 2 IOCs
  • PyPI
    libpaypalpullsuper all versions
    MAL-2023-4289 checkmarx 2 IOCs
  • PyPI
    libencodeping all versions
    MAL-2023-3982 checkmarx 2 IOCs
  • PyPI
    libcvcv all versions
    MAL-2023-3954 checkmarx 2 IOCs
  • PyPI
    esqpongcontrolkill all versions
    MAL-2023-3214 checkmarx 2 IOCs
  • PyPI
    esqmaskpostgame all versions
    MAL-2023-3090 checkmarx 2 IOCs
  • PyPI
    tppushstring all versions
    MAL-2023-7451 checkmarx 2 IOCs
  • PyPI
    tplibinfo all versions
    MAL-2023-7210 checkmarx 2 IOCs
  • PyPI
    selfgrandhackedver all versions
    MAL-2023-6111 checkmarx 2 IOCs
  • PyPI
    selfgetmaskpong all versions
    MAL-2023-6096 checkmarx 2 IOCs
  • PyPI
    py-reosint all versions
    MAL-2023-5597 checkmarx 2 IOCs
  • PyPI
    libpushcv all versions
    MAL-2023-4391 checkmarx 2 IOCs
  • PyPI
    tpstrsplit all versions
    MAL-2023-7630 checkmarx 2 IOCs
  • PyPI
    tpcvpipgui all versions
    MAL-2023-6991 checkmarx 2 IOCs
  • PyPI
    selfencodegame all versions
    MAL-2023-6047 checkmarx 2 IOCs
  • PyPI
    py-studystring all versions
    MAL-2023-5675 checkmarx 2 IOCs
  • PyPI
    py-prooflibmc all versions
    MAL-2023-5485 checkmarx 2 IOCs
  • PyPI
    libproofsuper all versions
    MAL-2023-4373 checkmarx 2 IOCs
  • PyPI
    esqpullhackedvirtual all versions
    MAL-2023-3263 checkmarx 2 IOCs
  • PyPI
    selfrelgtbgrand all versions
    MAL-2023-6596 checkmarx 2 IOCs
  • PyPI
    py-stringvisarand all versions
    MAL-2023-5641 checkmarx 2 IOCs
  • PyPI
    py-infoponghttp all versions
    MAL-2023-5216 checkmarx 2 IOCs
  • PyPI
    esqloadvisa all versions
    MAL-2023-3075 checkmarx 2 IOCs
  • PyPI
    esqkillram all versions
    MAL-2023-3032 checkmarx 2 IOCs
  • PyPI
    esqcraftkilllib all versions
    MAL-2023-2807 checkmarx 2 IOCs
  • PyPI
    tpcandycc all versions
    MAL-2023-6918 checkmarx 2 IOCs