Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpcandycc all versions
    MAL-2023-6918 checkmarx 2 IOCs
  • PyPI
    selfhttpproof all versions
    MAL-2023-6170 checkmarx 2 IOCs
  • PyPI
    selfhackedinfo all versions
    MAL-2023-6147 checkmarx 2 IOCs
  • PyPI
    selfhackedccmc all versions
    MAL-2023-6141 checkmarx 2 IOCs
  • PyPI
    libstrpullpost all versions
    MAL-2023-4525 checkmarx 2 IOCs
  • PyPI
    tpcpulgtb all versions
    MAL-2023-6965 checkmarx 2 IOCs
  • PyPI
    selfpaypalintel all versions
    MAL-2023-6388 checkmarx 2 IOCs
  • PyPI
    py-randomloadcandy all versions
    MAL-2023-5574 checkmarx 2 IOCs
  • PyPI
    py-lgtbencode all versions
    MAL-2023-5270 checkmarx 2 IOCs
  • PyPI
    libhydracraftrand all versions
    MAL-2023-4080 checkmarx 2 IOCs
  • PyPI
    esqgetvisacraft all versions
    MAL-2023-2906 checkmarx 2 IOCs
  • PyPI
    selfstudygrand all versions
    MAL-2023-6659 checkmarx 2 IOCs
  • PyPI
    selfloadintel all versions
    MAL-2023-6290 checkmarx 2 IOCs
  • PyPI
    py-lgtbadget all versions
    MAL-2023-5269 checkmarx 2 IOCs
  • PyPI
    selfgamepingurl all versions
    MAL-2023-6075 checkmarx 2 IOCs
  • PyPI
    py-verintsplit all versions
    MAL-2023-5734 checkmarx 2 IOCs
  • PyPI
    py-strlgtbstudy all versions
    MAL-2023-5644 checkmarx 2 IOCs
  • PyPI
    esqkillpywreplace all versions
    MAL-2023-3031 checkmarx 2 IOCs
  • PyPI
    selfrandompep all versions
    MAL-2023-6574 checkmarx 2 IOCs
  • PyPI
    libpywgame all versions
    MAL-2023-4418 checkmarx 2 IOCs
  • PyPI
    esqrecandy all versions
    MAL-2023-3355 checkmarx 2 IOCs
  • PyPI
    esqinfoproofvm all versions
    MAL-2023-2985 checkmarx 2 IOCs
  • PyPI
    esqadpaypal all versions
    MAL-2023-2732 checkmarx 2 IOCs
  • PyPI
    libramvmver all versions
    MAL-2023-4438 checkmarx 2 IOCs
  • PyPI
    libcraftstringcc all versions
    MAL-2023-3950 checkmarx 2 IOCs
  • PyPI
    tppingreplace all versions
    MAL-2023-7352 checkmarx 2 IOCs
  • PyPI
    esqmcpypaypal all versions
    MAL-2023-3109 checkmarx 2 IOCs
  • PyPI
    tpgrandkillhydra all versions
    MAL-2023-7062 checkmarx 2 IOCs
  • PyPI
    selfmineurl all versions
    MAL-2023-6347 checkmarx 2 IOCs
  • PyPI
    py-ultralib all versions
    MAL-2023-5709 checkmarx 2 IOCs
  • PyPI
    py-strnvidia all versions
    MAL-2023-5647 checkmarx 2 IOCs
  • PyPI
    py-postgameintel all versions
    MAL-2023-5467 checkmarx 2 IOCs
  • PyPI
    libvmrand all versions
    MAL-2023-4663 checkmarx 2 IOCs
  • PyPI
    libpushrandlib all versions
    MAL-2023-4403 checkmarx 2 IOCs
  • PyPI
    libpinggetcc all versions
    MAL-2023-4308 checkmarx 2 IOCs
  • PyPI
    libpepstring all versions
    MAL-2023-4305 checkmarx 2 IOCs
  • PyPI
    libpaypalpaypalrandom all versions
    MAL-2023-4286 checkmarx 2 IOCs
  • PyPI
    libcchydraencode all versions
    MAL-2023-3891 checkmarx 2 IOCs
  • PyPI
    esqstrproofint all versions
    MAL-2023-3440 checkmarx 2 IOCs
  • PyPI
    esqadpostmine all versions
    MAL-2023-2735 checkmarx 2 IOCs