Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-gameramcandy all versions
    MAL-2023-5111 checkmarx 2 IOCs
  • PyPI
    py-candykillencode all versions
    MAL-2023-5007 checkmarx 2 IOCs
  • PyPI
    libstringcandy all versions
    MAL-2023-4507 checkmarx 2 IOCs
  • PyPI
    librandcraftvirtual all versions
    MAL-2023-4440 checkmarx 2 IOCs
  • PyPI
    esqpaypalosintpost all versions
    MAL-2023-3170 checkmarx 2 IOCs
  • PyPI
    tpnvidiapyw all versions
    MAL-2023-7298 checkmarx 2 IOCs
  • PyPI
    selfvmpaypal all versions
    MAL-2023-6797 checkmarx 2 IOCs
  • PyPI
    selfkillcontrol all versions
    MAL-2023-6241 checkmarx 2 IOCs
  • PyPI
    selfintcontrolgrand all versions
    MAL-2023-6216 checkmarx 2 IOCs
  • PyPI
    liburlsuperpost all versions
    MAL-2023-4598 checkmarx 2 IOCs
  • PyPI
    libccraminfo all versions
    MAL-2023-3895 checkmarx 2 IOCs
  • PyPI
    esqrehttpinfo all versions
    MAL-2023-3360 checkmarx 2 IOCs
  • PyPI
    esqpushhttp all versions
    MAL-2023-3278 checkmarx 2 IOCs
  • PyPI
    esqpullurlget all versions
    MAL-2023-3274 checkmarx 2 IOCs
  • PyPI
    esqmcrand all versions
    MAL-2023-3110 checkmarx 2 IOCs
  • PyPI
    esqinthacked all versions
    MAL-2023-3005 checkmarx 2 IOCs
  • PyPI
    selfpipcpu all versions
    MAL-2023-6439 checkmarx 2 IOCs
  • PyPI
    selfgrandminepep all versions
    MAL-2023-6115 checkmarx 2 IOCs
  • PyPI
    selfgrandcandy all versions
    MAL-2023-6105 checkmarx 2 IOCs
  • PyPI
    selfcvhackedre all versions
    MAL-2023-6015 checkmarx 2 IOCs
  • PyPI
    py-paypalpippep all versions
    MAL-2023-5399 checkmarx 2 IOCs
  • PyPI
    py-guiminepep all versions
    MAL-2023-5142 checkmarx 2 IOCs
  • PyPI
    py-getsplitvisa all versions
    MAL-2023-5126 checkmarx 2 IOCs
  • PyPI
    esqvmvisa all versions
    MAL-2023-3573 checkmarx 2 IOCs
  • PyPI
    esqintelinfo all versions
    MAL-2023-2995 checkmarx 2 IOCs
  • PyPI
    tpsplitmcvisa all versions
    MAL-2023-7587 checkmarx 2 IOCs
  • PyPI
    tppullreplacehttp all versions
    MAL-2023-7438 checkmarx 2 IOCs
  • PyPI
    tpguimine all versions
    MAL-2023-7085 checkmarx 2 IOCs
  • PyPI
    selfintnvidia all versions
    MAL-2023-6229 checkmarx 2 IOCs
  • PyPI
    py-lgtbrandomsplit all versions
    MAL-2023-5283 checkmarx 2 IOCs
  • PyPI
    libultratoolvm all versions
    MAL-2023-4583 checkmarx 2 IOCs
  • PyPI
    tppywgetload all versions
    MAL-2023-7483 checkmarx 2 IOCs
  • PyPI
    tpproofstudy all versions
    MAL-2023-7418 checkmarx 2 IOCs
  • PyPI
    tpproofsplitcc all versions
    MAL-2023-7415 checkmarx 2 IOCs
  • PyPI
    tpgrandproof all versions
    MAL-2023-7067 checkmarx 2 IOCs
  • PyPI
    selfvisanvidia all versions
    MAL-2023-6774 checkmarx 2 IOCs
  • PyPI
    selfvirtualpep all versions
    MAL-2023-6762 checkmarx 2 IOCs
  • PyPI
    selfguivirtualkill all versions
    MAL-2023-6138 checkmarx 2 IOCs
  • PyPI
    selfedmask all versions
    MAL-2023-6037 checkmarx 2 IOCs
  • PyPI
    selfccmcpush all versions
    MAL-2023-5958 checkmarx 2 IOCs