Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpcandyinfomask all versions
    MAL-2023-6923 checkmarx 2 IOCs
  • PyPI
    selfgameencode all versions
    MAL-2023-6069 checkmarx 2 IOCs
  • PyPI
    libtoolsplit all versions
    MAL-2023-4570 checkmarx 2 IOCs
  • PyPI
    esqtoolre all versions
    MAL-2023-3486 checkmarx 2 IOCs
  • PyPI
    esqstudyguiping all versions
    MAL-2023-3449 checkmarx 2 IOCs
  • PyPI
    selfstrencode all versions
    MAL-2023-6632 checkmarx 2 IOCs
  • PyPI
    esqstrmcgrand all versions
    MAL-2023-3436 checkmarx 2 IOCs
  • PyPI
    libhydraregame all versions
    MAL-2023-4087 checkmarx 2 IOCs
  • PyPI
    libhackedgamecpu all versions
    MAL-2023-4054 checkmarx 2 IOCs
  • PyPI
    tpcvhackedgame all versions
    MAL-2023-6986 checkmarx 2 IOCs
  • PyPI
    libmcint all versions
    MAL-2023-4228 checkmarx 2 IOCs
  • PyPI
    selfmcvmcraft all versions
    MAL-2023-6331 checkmarx 2 IOCs
  • PyPI
    tpmcvisaed all versions
    MAL-2023-7270 checkmarx 2 IOCs
  • PyPI
    selfvisavm all versions
    MAL-2023-6787 checkmarx 2 IOCs
  • PyPI
    selfstrminegui all versions
    MAL-2023-6648 checkmarx 2 IOCs
  • PyPI
    selfponggui all versions
    MAL-2023-6458 checkmarx 2 IOCs
  • PyPI
    py-urlpep all versions
    MAL-2023-5725 checkmarx 2 IOCs
  • PyPI
    py-splittoolpull all versions
    MAL-2023-5626 checkmarx 2 IOCs
  • PyPI
    libstudyrandom all versions
    MAL-2023-4537 checkmarx 2 IOCs
  • PyPI
    libmineurl all versions
    MAL-2023-4247 checkmarx 2 IOCs
  • PyPI
    esqhttpcraftpong all versions
    MAL-2023-2948 checkmarx 2 IOCs
  • PyPI
    tpvmpushhacked all versions
    MAL-2023-7742 checkmarx 2 IOCs
  • PyPI
    tprandomvisapost all versions
    MAL-2023-7530 checkmarx 2 IOCs
  • PyPI
    selfmccc all versions
    MAL-2023-6319 checkmarx 2 IOCs
  • PyPI
    py-toolcontrol all versions
    MAL-2023-5689 checkmarx 2 IOCs
  • PyPI
    py-hackednvidiarand all versions
    MAL-2023-5160 checkmarx 2 IOCs
  • PyPI
    py-guiloadhacked all versions
    MAL-2023-5140 checkmarx 2 IOCs
  • PyPI
    py-encodeultra all versions
    MAL-2023-5101 checkmarx 2 IOCs
  • PyPI
    py-cvpy all versions
    MAL-2023-5073 checkmarx 2 IOCs
  • PyPI
    libsplitosint all versions
    MAL-2023-4497 checkmarx 2 IOCs
  • PyPI
    librepost all versions
    MAL-2023-4488 checkmarx 2 IOCs
  • PyPI
    esqnvidiahydraultra all versions
    MAL-2023-3132 checkmarx 2 IOCs
  • PyPI
    esqhydraponglib all versions
    MAL-2023-2968 checkmarx 2 IOCs
  • PyPI
    tpvercpu all versions
    MAL-2023-7693 checkmarx 2 IOCs
  • PyPI
    tppostrandomsplit all versions
    MAL-2023-7395 checkmarx 2 IOCs
  • PyPI
    tpkillpush all versions
    MAL-2023-7192 checkmarx 2 IOCs
  • PyPI
    tpintelkill all versions
    MAL-2023-7157 checkmarx 2 IOCs
  • PyPI
    tpcvcontrol all versions
    MAL-2023-6983 checkmarx 2 IOCs
  • PyPI
    selfpepsplitram all versions
    MAL-2023-6416 checkmarx 2 IOCs
  • PyPI
    selflibtool all versions
    MAL-2023-6278 checkmarx 2 IOCs