Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-pongcandyram all versions
    MAL-2023-5450 checkmarx 2 IOCs
  • PyPI
    py-gamerepong all versions
    MAL-2023-5113 checkmarx 2 IOCs
  • PyPI
    libpywrand all versions
    MAL-2023-4424 checkmarx 2 IOCs
  • PyPI
    selfhackedspliturl all versions
    MAL-2023-6160 checkmarx 2 IOCs
  • PyPI
    py-pongedvirtual all versions
    MAL-2023-5454 checkmarx 2 IOCs
  • PyPI
    py-nvidiacandy all versions
    MAL-2023-5358 checkmarx 2 IOCs
  • PyPI
    esqstudyint all versions
    MAL-2023-3451 checkmarx 2 IOCs
  • PyPI
    esqstrosint all versions
    MAL-2023-3437 checkmarx 2 IOCs
  • PyPI
    tptoolstringpush all versions
    MAL-2023-7665 checkmarx 2 IOCs
  • PyPI
    tprandcandymask all versions
    MAL-2023-7516 checkmarx 2 IOCs
  • PyPI
    selfpipcandy all versions
    MAL-2023-6438 checkmarx 2 IOCs
  • PyPI
    selfgrandlgtbad all versions
    MAL-2023-6114 checkmarx 2 IOCs
  • PyPI
    py-loadmcvisa all versions
    MAL-2023-5307 checkmarx 2 IOCs
  • PyPI
    py-cvnvidia all versions
    MAL-2023-5070 checkmarx 2 IOCs
  • PyPI
    selfpipcv all versions
    MAL-2023-6440 checkmarx 2 IOCs
  • PyPI
    selfhydrasplitpy all versions
    MAL-2023-6188 checkmarx 2 IOCs
  • PyPI
    selfhydrapong all versions
    MAL-2023-6186 checkmarx 2 IOCs
  • PyPI
    selfhydracpu all versions
    MAL-2023-6178 checkmarx 2 IOCs
  • PyPI
    libtoolcraftgrand all versions
    MAL-2023-4560 checkmarx 2 IOCs
  • PyPI
    esqvmgrandgrand all versions
    MAL-2023-3562 checkmarx 2 IOCs
  • PyPI
    tplgtbload all versions
    MAL-2023-7201 checkmarx 2 IOCs
  • PyPI
    selfintproofintel all versions
    MAL-2023-6231 checkmarx 2 IOCs
  • PyPI
    py-visapyw all versions
    MAL-2023-5769 checkmarx 2 IOCs
  • PyPI
    tppepcontrolstring all versions
    MAL-2023-7332 checkmarx 2 IOCs
  • PyPI
    tpcpuadpaypal all versions
    MAL-2023-6959 checkmarx 2 IOCs
  • PyPI
    py-strvm all versions
    MAL-2023-5656 checkmarx 2 IOCs
  • PyPI
    esqpongram all versions
    MAL-2023-3223 checkmarx 2 IOCs
  • PyPI
    tpproofadpyw all versions
    MAL-2023-7402 checkmarx 2 IOCs
  • PyPI
    tpinfovirtualpost all versions
    MAL-2023-7148 checkmarx 2 IOCs
  • PyPI
    py-pepproof all versions
    MAL-2023-5418 checkmarx 2 IOCs
  • PyPI
    libosintpostvisa all versions
    MAL-2023-4273 checkmarx 2 IOCs
  • PyPI
    esqsupergame all versions
    MAL-2023-3465 checkmarx 2 IOCs
  • PyPI
    py-renvidia all versions
    MAL-2023-5596 checkmarx 2 IOCs
  • PyPI
    py-pippushosint all versions
    MAL-2023-5445 checkmarx 2 IOCs
  • PyPI
    py-libhttpmc all versions
    MAL-2023-5288 checkmarx 2 IOCs
  • PyPI
    libvmproofcc all versions
    MAL-2023-4660 checkmarx 2 IOCs
  • PyPI
    tplgtbinfo all versions
    MAL-2023-7200 checkmarx 2 IOCs
  • PyPI
    selfpingvirtual all versions
    MAL-2023-6436 checkmarx 2 IOCs
  • PyPI
    libgrandgrand all versions
    MAL-2023-4016 checkmarx 2 IOCs
  • PyPI
    esqlibcpued all versions
    MAL-2023-3049 checkmarx 2 IOCs