Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    libultraram all versions
    MAL-2023-4580 checkmarx 2 IOCs
  • PyPI
    esqpushkill all versions
    MAL-2023-3280 checkmarx 2 IOCs
  • PyPI
    esqedcpumask all versions
    MAL-2023-2836 checkmarx 2 IOCs
  • PyPI
    tpstringmced all versions
    MAL-2023-7611 checkmarx 2 IOCs
  • PyPI
    tprecpu all versions
    MAL-2023-7542 checkmarx 2 IOCs
  • PyPI
    tphttpgetload all versions
    MAL-2023-7111 checkmarx 2 IOCs
  • PyPI
    selfsupertool all versions
    MAL-2023-6681 checkmarx 2 IOCs
  • PyPI
    selfreloadlib all versions
    MAL-2023-6598 checkmarx 2 IOCs
  • PyPI
    selfmaskpong all versions
    MAL-2023-6310 checkmarx 2 IOCs
  • PyPI
    py-verurl all versions
    MAL-2023-5743 checkmarx 2 IOCs
  • PyPI
    py-replacerandom all versions
    MAL-2023-5606 checkmarx 2 IOCs
  • PyPI
    libpaypalpost all versions
    MAL-2023-4288 checkmarx 2 IOCs
  • PyPI
    libmaskhackedsplit all versions
    MAL-2023-4206 checkmarx 2 IOCs
  • PyPI
    libkillvisare all versions
    MAL-2023-4151 checkmarx 2 IOCs
  • PyPI
    esqpushvm all versions
    MAL-2023-3288 checkmarx 2 IOCs
  • PyPI
    esqpushget all versions
    MAL-2023-3277 checkmarx 2 IOCs
  • PyPI
    tpadcandy all versions
    MAL-2023-6904 checkmarx 2 IOCs
  • PyPI
    selfpullproof all versions
    MAL-2023-6507 checkmarx 2 IOCs
  • PyPI
    selfhydragamever all versions
    MAL-2023-6179 checkmarx 2 IOCs
  • PyPI
    selfgamemcnvidia all versions
    MAL-2023-6074 checkmarx 2 IOCs
  • PyPI
    selfedload all versions
    MAL-2023-6036 checkmarx 2 IOCs
  • PyPI
    py-pullping all versions
    MAL-2023-5503 checkmarx 2 IOCs
  • PyPI
    py-pullnvidiacontrol all versions
    MAL-2023-5502 checkmarx 2 IOCs
  • PyPI
    py-mcrand all versions
    MAL-2023-5341 checkmarx 2 IOCs
  • PyPI
    py-getcrafttool all versions
    MAL-2023-5119 checkmarx 2 IOCs
  • PyPI
    py-controlcraftstr all versions
    MAL-2023-5027 checkmarx 2 IOCs
  • PyPI
    esqsupercpuurl all versions
    MAL-2023-3464 checkmarx 2 IOCs
  • PyPI
    esqcraftvirtual all versions
    MAL-2023-2816 checkmarx 2 IOCs
  • PyPI
    tpstudyintmc all versions
    MAL-2023-7636 checkmarx 2 IOCs
  • PyPI
    tpreplaceget all versions
    MAL-2023-7556 checkmarx 2 IOCs
  • PyPI
    tphackedmask all versions
    MAL-2023-7101 checkmarx 2 IOCs
  • PyPI
    tpcvhydrastring all versions
    MAL-2023-6987 checkmarx 2 IOCs
  • PyPI
    tpadrandommc all versions
    MAL-2023-6912 checkmarx 2 IOCs
  • PyPI
    selfpepcc all versions
    MAL-2023-6404 checkmarx 2 IOCs
  • PyPI
    py-pongtoolkill all versions
    MAL-2023-5462 checkmarx 2 IOCs
  • PyPI
    py-candylgtb all versions
    MAL-2023-5008 checkmarx 2 IOCs
  • PyPI
    liburlinfogrand all versions
    MAL-2023-4589 checkmarx 2 IOCs
  • PyPI
    libtoolintencode all versions
    MAL-2023-4563 checkmarx 2 IOCs
  • PyPI
    libcontrolramre all versions
    MAL-2023-3914 checkmarx 2 IOCs
  • PyPI
    esqpeppull all versions
    MAL-2023-3185 checkmarx 2 IOCs