Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-cpuintelsplit all versions
    MAL-2023-5044 checkmarx 2 IOCs
  • PyPI
    libosinturlping all versions
    MAL-2023-4279 checkmarx 2 IOCs
  • PyPI
    libgetvirtualget all versions
    MAL-2023-4013 checkmarx 2 IOCs
  • PyPI
    libgamereplacemask all versions
    MAL-2023-3997 checkmarx 2 IOCs
  • PyPI
    esqminestudyurl all versions
    MAL-2023-3128 checkmarx 2 IOCs
  • PyPI
    tpultraencode all versions
    MAL-2023-7669 checkmarx 2 IOCs
  • PyPI
    tpgetpywhttp all versions
    MAL-2023-7052 checkmarx 2 IOCs
  • PyPI
    tpccproof all versions
    MAL-2023-6939 checkmarx 2 IOCs
  • PyPI
    tpadsuperpy all versions
    MAL-2023-6914 checkmarx 2 IOCs
  • PyPI
    selfmaskvm all versions
    MAL-2023-6317 checkmarx 2 IOCs
  • PyPI
    selfloadnvidiapip all versions
    MAL-2023-6293 checkmarx 2 IOCs
  • PyPI
    py-loadstudynvidia all versions
    MAL-2023-5313 checkmarx 2 IOCs
  • PyPI
    libsuperencode all versions
    MAL-2023-4543 checkmarx 2 IOCs
  • PyPI
    librandomgetcpu all versions
    MAL-2023-4455 checkmarx 2 IOCs
  • PyPI
    liblibad all versions
    MAL-2023-4176 checkmarx 2 IOCs
  • PyPI
    esqtoolreplacepep all versions
    MAL-2023-3487 checkmarx 2 IOCs
  • PyPI
    tppinghackedrand all versions
    MAL-2023-7346 checkmarx 2 IOCs
  • PyPI
    selfreplacead all versions
    MAL-2023-6600 checkmarx 2 IOCs
  • PyPI
    selfrandpong all versions
    MAL-2023-6585 checkmarx 2 IOCs
  • PyPI
    py-ccrandom all versions
    MAL-2023-5022 checkmarx 2 IOCs
  • PyPI
    libpipnvidia all versions
    MAL-2023-4326 checkmarx 2 IOCs
  • PyPI
    esqramhttp all versions
    MAL-2023-3322 checkmarx 2 IOCs
  • PyPI
    esqosintpostad all versions
    MAL-2023-3155 checkmarx 2 IOCs
  • PyPI
    esqminegrandvirtual all versions
    MAL-2023-3119 checkmarx 2 IOCs
  • PyPI
    tptoolminelib all versions
    MAL-2023-7663 checkmarx 2 IOCs
  • PyPI
    tpmcgethacked all versions
    MAL-2023-7257 checkmarx 2 IOCs
  • PyPI
    selfvercvrand all versions
    MAL-2023-6733 checkmarx 2 IOCs
  • PyPI
    selfpywloadpong all versions
    MAL-2023-6542 checkmarx 2 IOCs
  • PyPI
    selfencodeverhydra all versions
    MAL-2023-6063 checkmarx 2 IOCs
  • PyPI
    py-infocvcv all versions
    MAL-2023-5207 checkmarx 2 IOCs
  • PyPI
    esqpullosintpost all versions
    MAL-2023-3268 checkmarx 2 IOCs
  • PyPI
    tptoollgtbhttp all versions
    MAL-2023-7660 checkmarx 2 IOCs
  • PyPI
    tposintcpumask all versions
    MAL-2023-7305 checkmarx 2 IOCs
  • PyPI
    tpintelcpuver all versions
    MAL-2023-7151 checkmarx 2 IOCs
  • PyPI
    selfloadcvhttp all versions
    MAL-2023-6287 checkmarx 2 IOCs
  • PyPI
    py-ultrareplace all versions
    MAL-2023-5717 checkmarx 2 IOCs
  • PyPI
    esqreplacegame all versions
    MAL-2023-3367 checkmarx 2 IOCs
  • PyPI
    esqccping all versions
    MAL-2023-2759 checkmarx 2 IOCs
  • PyPI
    selfsplithackedgrand all versions
    MAL-2023-6619 checkmarx 2 IOCs
  • PyPI
    selfgrandproof all versions
    MAL-2023-6120 checkmarx 2 IOCs