Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    selflibrandomcv all versions
    MAL-2023-6276 checkmarx 2 IOCs
  • PyPI
    selfhackedcvnvidia all versions
    MAL-2023-6144 checkmarx 2 IOCs
  • PyPI
    py-adcpu all versions
    MAL-2023-4983 checkmarx 2 IOCs
  • PyPI
    esqurlpip all versions
    MAL-2023-3509 checkmarx 2 IOCs
  • PyPI
    esqcpucandy all versions
    MAL-2023-2786 checkmarx 2 IOCs
  • PyPI
    tprandomsplit all versions
    MAL-2023-7526 checkmarx 2 IOCs
  • PyPI
    tphttppipstring all versions
    MAL-2023-7114 checkmarx 2 IOCs
  • PyPI
    selfultravirtualpy all versions
    MAL-2023-6719 checkmarx 2 IOCs
  • PyPI
    selfencoderandom all versions
    MAL-2023-6059 checkmarx 2 IOCs
  • PyPI
    py-ultrastringget all versions
    MAL-2023-5718 checkmarx 2 IOCs
  • PyPI
    libvisastr all versions
    MAL-2023-4650 checkmarx 2 IOCs
  • PyPI
    libpushvisa all versions
    MAL-2023-4406 checkmarx 2 IOCs
  • PyPI
    libpullpep all versions
    MAL-2023-4380 checkmarx 2 IOCs
  • PyPI
    libminenvidiahydra all versions
    MAL-2023-4243 checkmarx 2 IOCs
  • PyPI
    esqcraftrandnvidia all versions
    MAL-2023-2812 checkmarx 2 IOCs
  • PyPI
    tprelibcpu all versions
    MAL-2023-7549 checkmarx 2 IOCs
  • PyPI
    tpencodecpupong all versions
    MAL-2023-7013 checkmarx 2 IOCs
  • PyPI
    selfpipstringcc all versions
    MAL-2023-6450 checkmarx 2 IOCs
  • PyPI
    selfpepkill all versions
    MAL-2023-6407 checkmarx 2 IOCs
  • PyPI
    selfhackedmaskultra all versions
    MAL-2023-6153 checkmarx 2 IOCs
  • PyPI
    selfgeturl all versions
    MAL-2023-6102 checkmarx 2 IOCs
  • PyPI
    selfcvproofsuper all versions
    MAL-2023-6023 checkmarx 2 IOCs
  • PyPI
    py-maskosintpull all versions
    MAL-2023-5324 checkmarx 2 IOCs
  • PyPI
    libvisamc all versions
    MAL-2023-4645 checkmarx 2 IOCs
  • PyPI
    libstringgetosint all versions
    MAL-2023-4509 checkmarx 2 IOCs
  • PyPI
    librandomget all versions
    MAL-2023-4454 checkmarx 2 IOCs
  • PyPI
    libpullstring all versions
    MAL-2023-4385 checkmarx 2 IOCs
  • PyPI
    esqrepyvirtual all versions
    MAL-2023-3381 checkmarx 2 IOCs
  • PyPI
    tpramguihttp all versions
    MAL-2023-7501 checkmarx 2 IOCs
  • PyPI
    tpgetstr all versions
    MAL-2023-7053 checkmarx 2 IOCs
  • PyPI
    tpcpugetping all versions
    MAL-2023-6962 checkmarx 2 IOCs
  • PyPI
    selfvergui all versions
    MAL-2023-6737 checkmarx 2 IOCs
  • PyPI
    py-pipstudystr all versions
    MAL-2023-5448 checkmarx 2 IOCs
  • PyPI
    py-gameremc all versions
    MAL-2023-5112 checkmarx 2 IOCs
  • PyPI
    libpullcandy all versions
    MAL-2023-4375 checkmarx 2 IOCs
  • PyPI
    libinfohacked all versions
    MAL-2023-4100 checkmarx 2 IOCs
  • PyPI
    libgrandosintencode all versions
    MAL-2023-4023 checkmarx 2 IOCs
  • PyPI
    esqpepvirtualinfo all versions
    MAL-2023-3191 checkmarx 2 IOCs
  • PyPI
    tpurled all versions
    MAL-2023-7681 checkmarx 2 IOCs
  • PyPI
    tpintelre all versions
    MAL-2023-7166 checkmarx 2 IOCs