Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpminepostcpu all versions
    MAL-2023-7284 checkmarx 2 IOCs
  • PyPI
    tpintelcraft all versions
    MAL-2023-7152 checkmarx 2 IOCs
  • PyPI
    tpcpuintcpu all versions
    MAL-2023-6963 checkmarx 2 IOCs
  • PyPI
    py-vermine all versions
    MAL-2023-5736 checkmarx 2 IOCs
  • PyPI
    py-pippywvm all versions
    MAL-2023-5447 checkmarx 2 IOCs
  • PyPI
    py-gamecccpu all versions
    MAL-2023-5104 checkmarx 2 IOCs
  • PyPI
    py-adtool all versions
    MAL-2023-4998 checkmarx 2 IOCs
  • PyPI
    librandreplace all versions
    MAL-2023-4464 checkmarx 2 IOCs
  • PyPI
    libcraftre all versions
    MAL-2023-3946 checkmarx 2 IOCs
  • PyPI
    selfrepushencode all versions
    MAL-2023-6613 checkmarx 2 IOCs
  • PyPI
    selfreplacerandget all versions
    MAL-2023-6606 checkmarx 2 IOCs
  • PyPI
    selfhackedmaskram all versions
    MAL-2023-6152 checkmarx 2 IOCs
  • PyPI
    py-vminfo all versions
    MAL-2023-5782 checkmarx 2 IOCs
  • PyPI
    py-cchttp all versions
    MAL-2023-5018 checkmarx 2 IOCs
  • PyPI
    libsuperpost all versions
    MAL-2023-4552 checkmarx 2 IOCs
  • PyPI
    libpinghydrapong all versions
    MAL-2023-4310 checkmarx 2 IOCs
  • PyPI
    libgetpongrandom all versions
    MAL-2023-4004 checkmarx 2 IOCs
  • PyPI
    esqpingvercraft all versions
    MAL-2023-3204 checkmarx 2 IOCs
  • PyPI
    esqkillgameinfo all versions
    MAL-2023-3024 checkmarx 2 IOCs
  • PyPI
    tppostproofencode all versions
    MAL-2023-7393 checkmarx 2 IOCs
  • PyPI
    selfsupergui all versions
    MAL-2023-6675 checkmarx 2 IOCs
  • PyPI
    selfguipullsplit all versions
    MAL-2023-6134 checkmarx 2 IOCs
  • PyPI
    py-paypalrandom all versions
    MAL-2023-5403 checkmarx 2 IOCs
  • PyPI
    py-paypalpaypal all versions
    MAL-2023-5398 checkmarx 2 IOCs
  • PyPI
    py-adgame all versions
    MAL-2023-4986 checkmarx 2 IOCs
  • PyPI
    libpushultra all versions
    MAL-2023-4404 checkmarx 2 IOCs
  • PyPI
    esqencodereplacehacked all versions
    MAL-2023-2863 checkmarx 2 IOCs
  • PyPI
    tppinghttpget all versions
    MAL-2023-7347 checkmarx 2 IOCs
  • PyPI
    tpccosint all versions
    MAL-2023-6936 checkmarx 2 IOCs
  • PyPI
    selframadhacked all versions
    MAL-2023-6553 checkmarx 2 IOCs
  • PyPI
    selfmcinfo all versions
    MAL-2023-6322 checkmarx 2 IOCs
  • PyPI
    py-hackedcontrol all versions
    MAL-2023-5153 checkmarx 2 IOCs
  • PyPI
    libreplacerandom all versions
    MAL-2023-4484 checkmarx 2 IOCs
  • PyPI
    esqvisavirtualgui all versions
    MAL-2023-3557 checkmarx 2 IOCs
  • PyPI
    tpreplaceproof all versions
    MAL-2023-7563 checkmarx 2 IOCs
  • PyPI
    tpramvirtual all versions
    MAL-2023-7512 checkmarx 2 IOCs
  • PyPI
    selfreplacelib all versions
    MAL-2023-6602 checkmarx 2 IOCs
  • PyPI
    py-nvidiasuper all versions
    MAL-2023-5376 checkmarx 2 IOCs
  • PyPI
    py-edpip all versions
    MAL-2023-5082 checkmarx 2 IOCs
  • PyPI
    py-craftram all versions
    MAL-2023-5059 checkmarx 2 IOCs