Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    esqsplithttpmc all versions
    MAL-2023-3393 checkmarx 2 IOCs
  • PyPI
    selfrandomhydratool all versions
    MAL-2023-6571 checkmarx 2 IOCs
  • PyPI
    py-postultra all versions
    MAL-2023-5477 checkmarx 2 IOCs
  • PyPI
    py-pingpostkill all versions
    MAL-2023-5436 checkmarx 2 IOCs
  • PyPI
    py-loadintel all versions
    MAL-2023-5305 checkmarx 2 IOCs
  • PyPI
    libosintstringcandy all versions
    MAL-2023-4276 checkmarx 2 IOCs
  • PyPI
    libadstudypyw all versions
    MAL-2023-3867 checkmarx 2 IOCs
  • PyPI
    tpproofpushram all versions
    MAL-2023-7412 checkmarx 2 IOCs
  • PyPI
    selfstringstringgrand all versions
    MAL-2023-6643 checkmarx 2 IOCs
  • PyPI
    selfosinthackedpy all versions
    MAL-2023-6365 checkmarx 2 IOCs
  • PyPI
    libregame all versions
    MAL-2023-4471 checkmarx 2 IOCs
  • PyPI
    libloadpulllib all versions
    MAL-2023-4197 checkmarx 2 IOCs
  • PyPI
    libhydracvnvidia all versions
    MAL-2023-4081 checkmarx 2 IOCs
  • PyPI
    tprandpong all versions
    MAL-2023-7532 checkmarx 2 IOCs
  • PyPI
    selflibkill all versions
    MAL-2023-6272 checkmarx 2 IOCs
  • PyPI
    selfhydravmpaypal all versions
    MAL-2023-6191 checkmarx 2 IOCs
  • PyPI
    libverpip all versions
    MAL-2023-4611 checkmarx 2 IOCs
  • PyPI
    tpintelkillultra all versions
    MAL-2023-7158 checkmarx 2 IOCs
  • PyPI
    selfsuperhackedpy all versions
    MAL-2023-6676 checkmarx 2 IOCs
  • PyPI
    py-hydraurl all versions
    MAL-2023-5205 checkmarx 2 IOCs
  • PyPI
    esqpywmchttp all versions
    MAL-2023-3308 checkmarx 2 IOCs
  • PyPI
    selfvisavirtualmask all versions
    MAL-2023-6785 checkmarx 2 IOCs
  • PyPI
    py-killintel all versions
    MAL-2023-5259 checkmarx 2 IOCs
  • PyPI
    esqrandhacked all versions
    MAL-2023-3330 checkmarx 2 IOCs
  • PyPI
    tpresplitpull all versions
    MAL-2023-7575 checkmarx 2 IOCs
  • PyPI
    py-pongcraft all versions
    MAL-2023-5452 checkmarx 2 IOCs
  • PyPI
    selfhackedmask all versions
    MAL-2023-6151 checkmarx 2 IOCs
  • PyPI
    selfcpure all versions
    MAL-2023-5997 checkmarx 2 IOCs
  • PyPI
    py-studypush all versions
    MAL-2023-5673 checkmarx 2 IOCs
  • PyPI
    py-maskgrand all versions
    MAL-2023-5316 checkmarx 2 IOCs
  • PyPI
    py-pymaskrand all versions
    MAL-2023-5526 checkmarx 2 IOCs
  • PyPI
    esqproofgetosint all versions
    MAL-2023-3245 checkmarx 2 IOCs
  • PyPI
    selfvirtualhttpget all versions
    MAL-2023-6756 checkmarx 2 IOCs
  • PyPI
    esqpostver all versions
    MAL-2023-3242 checkmarx 2 IOCs
  • PyPI
    libstrget all versions
    MAL-2023-4506 checkmarx 2 IOCs
  • PyPI
    py-gamesuper all versions
    MAL-2023-5114 checkmarx 2 IOCs
  • PyPI
    selframpushrand all versions
    MAL-2023-6559 checkmarx 2 IOCs
  • PyPI
    selfvirtualpong all versions
    MAL-2023-6764 checkmarx 2 IOCs
  • PyPI
    selfvirtualinfovirtual all versions
    MAL-2023-6760 checkmarx 2 IOCs
  • PyPI
    selfloadvisa all versions
    MAL-2023-6298 checkmarx 2 IOCs