Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    selfguiinteled all versions
    MAL-2023-6129 checkmarx 2 IOCs
  • PyPI
    py-loadcpugui all versions
    MAL-2023-5303 checkmarx 2 IOCs
  • PyPI
    libsplitrandre all versions
    MAL-2023-4501 checkmarx 2 IOCs
  • PyPI
    libnvidiaencodehacked all versions
    MAL-2023-4252 checkmarx 2 IOCs
  • PyPI
    libmaskrandomcc all versions
    MAL-2023-4215 checkmarx 2 IOCs
  • PyPI
    libgamecontrol all versions
    MAL-2023-3992 checkmarx 2 IOCs
  • PyPI
    esqpingnvidia all versions
    MAL-2023-3199 checkmarx 2 IOCs
  • PyPI
    tpretoolproof all versions
    MAL-2023-7577 checkmarx 2 IOCs
  • PyPI
    tphackeded all versions
    MAL-2023-7092 checkmarx 2 IOCs
  • PyPI
    libinfore all versions
    MAL-2023-4107 checkmarx 2 IOCs
  • PyPI
    libcpuinted all versions
    MAL-2023-3928 checkmarx 2 IOCs
  • PyPI
    esqurlmine all versions
    MAL-2023-3507 checkmarx 2 IOCs
  • PyPI
    esqlibstrpost all versions
    MAL-2023-3061 checkmarx 2 IOCs
  • PyPI
    tpminevirtual all versions
    MAL-2023-7289 checkmarx 2 IOCs
  • PyPI
    tploadreplace all versions
    MAL-2023-7236 checkmarx 2 IOCs
  • PyPI
    py-pypywpy all versions
    MAL-2023-5530 checkmarx 2 IOCs
  • PyPI
    py-hackedcandyhttp all versions
    MAL-2023-5150 checkmarx 2 IOCs
  • PyPI
    libpushgrand all versions
    MAL-2023-4394 checkmarx 2 IOCs
  • PyPI
    tpreinfo all versions
    MAL-2023-7547 checkmarx 2 IOCs
  • PyPI
    tpnvidiahttpreplace all versions
    MAL-2023-7291 checkmarx 2 IOCs
  • PyPI
    tpcved all versions
    MAL-2023-6984 checkmarx 2 IOCs
  • PyPI
    selframcandysplit all versions
    MAL-2023-6554 checkmarx 2 IOCs
  • PyPI
    py-virtualsplit all versions
    MAL-2023-5760 checkmarx 2 IOCs
  • PyPI
    py-regrand all versions
    MAL-2023-5592 checkmarx 2 IOCs
  • PyPI
    py-pingadkill all versions
    MAL-2023-5425 checkmarx 2 IOCs
  • PyPI
    py-intstr all versions
    MAL-2023-5251 checkmarx 2 IOCs
  • PyPI
    selfstringurlgrand all versions
    MAL-2023-6644 checkmarx 2 IOCs
  • PyPI
    selfstringpaypalcandy all versions
    MAL-2023-6639 checkmarx 2 IOCs
  • PyPI
    selfpingcpuad all versions
    MAL-2023-6422 checkmarx 2 IOCs
  • PyPI
    selfintcontrol all versions
    MAL-2023-6215 checkmarx 2 IOCs
  • PyPI
    selfgetinthydra all versions
    MAL-2023-6093 checkmarx 2 IOCs
  • PyPI
    esqedgrandpull all versions
    MAL-2023-2840 checkmarx 2 IOCs
  • PyPI
    esqccencode all versions
    MAL-2023-2753 checkmarx 2 IOCs
  • PyPI
    tprehacked all versions
    MAL-2023-7546 checkmarx 2 IOCs
  • PyPI
    tppongsplitrandom all versions
    MAL-2023-7383 checkmarx 2 IOCs
  • PyPI
    tphttpad all versions
    MAL-2023-7109 checkmarx 2 IOCs
  • PyPI
    selfstringcandycv all versions
    MAL-2023-6633 checkmarx 2 IOCs
  • PyPI
    py-vminforeplace all versions
    MAL-2023-5783 checkmarx 2 IOCs
  • PyPI
    libstringstringgame all versions
    MAL-2023-4519 checkmarx 2 IOCs
  • PyPI
    libgetpy all versions
    MAL-2023-4006 checkmarx 2 IOCs