Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,172 npm 223,993 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-pippip all versions
    MAL-2023-5444 checkmarx 2 IOCs
  • PyPI
    libinfohydravirtual all versions
    MAL-2023-4101 checkmarx 2 IOCs
  • PyPI
    libhydrapongstudy all versions
    MAL-2023-4086 checkmarx 2 IOCs
  • PyPI
    esqvermaskping all versions
    MAL-2023-3520 checkmarx 2 IOCs
  • PyPI
    esqpongultra all versions
    MAL-2023-3224 checkmarx 2 IOCs
  • PyPI
    esqhttpping all versions
    MAL-2023-2957 checkmarx 2 IOCs
  • PyPI
    selfultracpu all versions
    MAL-2023-6701 checkmarx 2 IOCs
  • PyPI
    selfstrcc all versions
    MAL-2023-6631 checkmarx 2 IOCs
  • PyPI
    py-virtualgetvm all versions
    MAL-2023-5748 checkmarx 2 IOCs
  • PyPI
    py-pinghydra all versions
    MAL-2023-5432 checkmarx 2 IOCs
  • PyPI
    esqurlhackedrand all versions
    MAL-2023-3504 checkmarx 2 IOCs
  • PyPI
    esqstringpushload all versions
    MAL-2023-3427 checkmarx 2 IOCs
  • PyPI
    esqcandygrandtool all versions
    MAL-2023-2743 checkmarx 2 IOCs
  • PyPI
    selfstrspliturl all versions
    MAL-2023-6652 checkmarx 2 IOCs
  • PyPI
    selfhackedmcpong all versions
    MAL-2023-6154 checkmarx 2 IOCs
  • PyPI
    py-vmcontrolgrand all versions
    MAL-2023-5779 checkmarx 2 IOCs
  • PyPI
    py-virtualpip all versions
    MAL-2023-5757 checkmarx 2 IOCs
  • PyPI
    py-studygame all versions
    MAL-2023-5660 checkmarx 2 IOCs
  • PyPI
    py-killcandyosint all versions
    MAL-2023-5255 checkmarx 2 IOCs
  • PyPI
    esqtoolmaskver all versions
    MAL-2023-3480 checkmarx 2 IOCs
  • PyPI
    esqpipvisacv all versions
    MAL-2023-3213 checkmarx 2 IOCs
  • PyPI
    esqintstudy all versions
    MAL-2023-3018 checkmarx 2 IOCs
  • PyPI
    esqgamepystudy all versions
    MAL-2023-2879 checkmarx 2 IOCs
  • PyPI
    esqadpip all versions
    MAL-2023-2734 checkmarx 2 IOCs
  • PyPI
    tpurlstudy all versions
    MAL-2023-7690 checkmarx 2 IOCs
  • PyPI
    tpnvidiapush all versions
    MAL-2023-7297 checkmarx 2 IOCs
  • PyPI
    selfminehydraload all versions
    MAL-2023-6336 checkmarx 2 IOCs
  • PyPI
    py-hydrapost all versions
    MAL-2023-5201 checkmarx 2 IOCs
  • PyPI
    py-cvint all versions
    MAL-2023-5066 checkmarx 2 IOCs
  • PyPI
    libpostping all versions
    MAL-2023-4356 checkmarx 2 IOCs
  • PyPI
    tpencodecandy all versions
    MAL-2023-7011 checkmarx 2 IOCs
  • PyPI
    selfvmrandom all versions
    MAL-2023-6800 checkmarx 2 IOCs
  • PyPI
    py-proofmask all versions
    MAL-2023-5486 checkmarx 2 IOCs
  • PyPI
    py-libverstr all versions
    MAL-2023-5299 checkmarx 2 IOCs
  • PyPI
    py-libstring all versions
    MAL-2023-5298 checkmarx 2 IOCs
  • PyPI
    py-lgtbminecc all versions
    MAL-2023-5275 checkmarx 2 IOCs
  • PyPI
    librandomguitool all versions
    MAL-2023-4457 checkmarx 2 IOCs
  • PyPI
    esqreplacepull all versions
    MAL-2023-3373 checkmarx 2 IOCs
  • PyPI
    esqpywloadmask all versions
    MAL-2023-3307 checkmarx 2 IOCs
  • PyPI
    tpgetsuperurl all versions
    MAL-2023-7055 checkmarx 2 IOCs