Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-nvidiastring all versions
    MAL-2023-5374 checkmarx 2 IOCs
  • PyPI
    libstringpy all versions
    MAL-2023-4515 checkmarx 2 IOCs
  • PyPI
    liblibgame all versions
    MAL-2023-4179 checkmarx 2 IOCs
  • PyPI
    libintelinfostr all versions
    MAL-2023-4116 checkmarx 2 IOCs
  • PyPI
    libcpumineed all versions
    MAL-2023-3929 checkmarx 2 IOCs
  • PyPI
    libadstringstudy all versions
    MAL-2023-3866 checkmarx 2 IOCs
  • PyPI
    esqsplitpushhydra all versions
    MAL-2023-3403 checkmarx 2 IOCs
  • PyPI
    esqpushload all versions
    MAL-2023-3282 checkmarx 2 IOCs
  • PyPI
    tpsuperping all versions
    MAL-2023-7649 checkmarx 2 IOCs
  • PyPI
    tprandomloadpaypal all versions
    MAL-2023-7523 checkmarx 2 IOCs
  • PyPI
    selfvirtualcandy all versions
    MAL-2023-6752 checkmarx 2 IOCs
  • PyPI
    selfpaypalosintmine all versions
    MAL-2023-6393 checkmarx 2 IOCs
  • PyPI
    selfgrandencodecv all versions
    MAL-2023-6109 checkmarx 2 IOCs
  • PyPI
    py-infostring all versions
    MAL-2023-5220 checkmarx 2 IOCs
  • PyPI
    libsuperinfo all versions
    MAL-2023-4546 checkmarx 2 IOCs
  • PyPI
    libinfosuperint all versions
    MAL-2023-4109 checkmarx 2 IOCs
  • PyPI
    esqsupertool all versions
    MAL-2023-3472 checkmarx 2 IOCs
  • PyPI
    esqcvstudycraft all versions
    MAL-2023-2832 checkmarx 2 IOCs
  • PyPI
    tpadtool all versions
    MAL-2023-6915 checkmarx 2 IOCs
  • PyPI
    selfvmload all versions
    MAL-2023-6795 checkmarx 2 IOCs
  • PyPI
    selfstringlgtbhttp all versions
    MAL-2023-6636 checkmarx 2 IOCs
  • PyPI
    py-virtualpaypalcraft all versions
    MAL-2023-5756 checkmarx 2 IOCs
  • PyPI
    py-minereplacesuper all versions
    MAL-2023-5356 checkmarx 2 IOCs
  • PyPI
    py-infoinfo all versions
    MAL-2023-5209 checkmarx 2 IOCs
  • PyPI
    py-candystring all versions
    MAL-2023-5013 checkmarx 2 IOCs
  • PyPI
    libpushpyw all versions
    MAL-2023-4399 checkmarx 2 IOCs
  • PyPI
    libcontrolosint all versions
    MAL-2023-3911 checkmarx 2 IOCs
  • PyPI
    esqpostcraft all versions
    MAL-2023-3226 checkmarx 2 IOCs
  • PyPI
    esqkillultrarand all versions
    MAL-2023-3037 checkmarx 2 IOCs
  • PyPI
    tpvisaproof all versions
    MAL-2023-7727 checkmarx 2 IOCs
  • PyPI
    py-visaurlosint all versions
    MAL-2023-5773 checkmarx 2 IOCs
  • PyPI
    libmcintel all versions
    MAL-2023-4229 checkmarx 2 IOCs
  • PyPI
    liblgtbpyw all versions
    MAL-2023-4171 checkmarx 2 IOCs
  • PyPI
    libinthydragrand all versions
    MAL-2023-4125 checkmarx 2 IOCs
  • PyPI
    esqvmvisapush all versions
    MAL-2023-3574 checkmarx 2 IOCs
  • PyPI
    esqpypaypalurl all versions
    MAL-2023-3296 checkmarx 2 IOCs
  • PyPI
    esqcpucraftstudy all versions
    MAL-2023-2790 checkmarx 2 IOCs
  • PyPI
    tpultralgtbcandy all versions
    MAL-2023-7675 checkmarx 2 IOCs
  • PyPI
    tppywed all versions
    MAL-2023-7481 checkmarx 2 IOCs
  • PyPI
    selflibliblib all versions
    MAL-2023-6273 checkmarx 2 IOCs