Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-controlstrcraft all versions
    MAL-2023-5039 checkmarx 2 IOCs
  • PyPI
    esqverramstr all versions
    MAL-2023-3526 checkmarx 2 IOCs
  • PyPI
    esqinfoedpush all versions
    MAL-2023-2975 checkmarx 2 IOCs
  • PyPI
    tppippypull all versions
    MAL-2023-7370 checkmarx 2 IOCs
  • PyPI
    selfloadkillstring all versions
    MAL-2023-6291 checkmarx 2 IOCs
  • PyPI
    selfkillvirtual all versions
    MAL-2023-6253 checkmarx 2 IOCs
  • PyPI
    selfinfoint all versions
    MAL-2023-6199 checkmarx 2 IOCs
  • PyPI
    py-intelgame all versions
    MAL-2023-5228 checkmarx 2 IOCs
  • PyPI
    py-infover all versions
    MAL-2023-5221 checkmarx 2 IOCs
  • PyPI
    py-candyultra all versions
    MAL-2023-5014 checkmarx 2 IOCs
  • PyPI
    tploadcc all versions
    MAL-2023-7220 checkmarx 2 IOCs
  • PyPI
    selfvisapep all versions
    MAL-2023-6778 checkmarx 2 IOCs
  • PyPI
    py-ultracraft all versions
    MAL-2023-5705 checkmarx 2 IOCs
  • PyPI
    py-loadpostpush all versions
    MAL-2023-5311 checkmarx 2 IOCs
  • PyPI
    librandomcontrol all versions
    MAL-2023-4451 checkmarx 2 IOCs
  • PyPI
    libpingpywproof all versions
    MAL-2023-4313 checkmarx 2 IOCs
  • PyPI
    libpaypalintpy all versions
    MAL-2023-4283 checkmarx 2 IOCs
  • PyPI
    esqencodereplaceproof all versions
    MAL-2023-2864 checkmarx 2 IOCs
  • PyPI
    tptoolurlgui all versions
    MAL-2023-7666 checkmarx 2 IOCs
  • PyPI
    tprere all versions
    MAL-2023-7573 checkmarx 2 IOCs
  • PyPI
    selfproofpullsplit all versions
    MAL-2023-6495 checkmarx 2 IOCs
  • PyPI
    selfintelgametool all versions
    MAL-2023-6221 checkmarx 2 IOCs
  • PyPI
    esqpaypalsuperload all versions
    MAL-2023-3175 checkmarx 2 IOCs
  • PyPI
    selfnvidiaencode all versions
    MAL-2023-6351 checkmarx 2 IOCs
  • PyPI
    selfgamerenvidia all versions
    MAL-2023-6083 checkmarx 2 IOCs
  • PyPI
    libultrapushload all versions
    MAL-2023-4578 checkmarx 2 IOCs
  • PyPI
    libpingurl all versions
    MAL-2023-4317 checkmarx 2 IOCs
  • PyPI
    esqhackedsplitram all versions
    MAL-2023-2947 checkmarx 2 IOCs
  • PyPI
    selfintelpip all versions
    MAL-2023-6223 checkmarx 2 IOCs
  • PyPI
    esqmcpullram all versions
    MAL-2023-3108 checkmarx 2 IOCs
  • PyPI
    esqguilibinfo all versions
    MAL-2023-2927 checkmarx 2 IOCs
  • PyPI
    esqgetkill all versions
    MAL-2023-2894 checkmarx 2 IOCs
  • PyPI
    selfrerandom all versions
    MAL-2023-6614 checkmarx 2 IOCs
  • PyPI
    py-ramencode all versions
    MAL-2023-5546 checkmarx 2 IOCs
  • PyPI
    libvirtualintel all versions
    MAL-2023-4623 checkmarx 2 IOCs
  • PyPI
    esqosintpip all versions
    MAL-2023-3154 checkmarx 2 IOCs
  • PyPI
    selfvirtualhackedhttp all versions
    MAL-2023-6755 checkmarx 2 IOCs
  • PyPI
    py-virtualpipkill all versions
    MAL-2023-5758 checkmarx 2 IOCs
  • PyPI
    libpeppostmask all versions
    MAL-2023-4299 checkmarx 2 IOCs
  • PyPI
    libintintel all versions
    MAL-2023-4127 checkmarx 2 IOCs