Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpintelcv all versions
    MAL-2023-7153 checkmarx 2 IOCs
  • PyPI
    selfpongpull all versions
    MAL-2023-6461 checkmarx 2 IOCs
  • PyPI
    selfedrandomad all versions
    MAL-2023-6040 checkmarx 2 IOCs
  • PyPI
    selfcraftcpu all versions
    MAL-2023-6002 checkmarx 2 IOCs
  • PyPI
    py-posthydratool all versions
    MAL-2023-5469 checkmarx 2 IOCs
  • PyPI
    py-killint all versions
    MAL-2023-5258 checkmarx 2 IOCs
  • PyPI
    libmccandyhttp all versions
    MAL-2023-4222 checkmarx 2 IOCs
  • PyPI
    libgetcccandy all versions
    MAL-2023-4001 checkmarx 2 IOCs
  • PyPI
    tpvisapostping all versions
    MAL-2023-7726 checkmarx 2 IOCs
  • PyPI
    tppeppaypalhttp all versions
    MAL-2023-7335 checkmarx 2 IOCs
  • PyPI
    selfrandomgui all versions
    MAL-2023-6569 checkmarx 2 IOCs
  • PyPI
    py-ultracv all versions
    MAL-2023-5706 checkmarx 2 IOCs
  • PyPI
    libvirtualgame all versions
    MAL-2023-4620 checkmarx 2 IOCs
  • PyPI
    libstudyreplace all versions
    MAL-2023-4538 checkmarx 2 IOCs
  • PyPI
    libmaskreurl all versions
    MAL-2023-4216 checkmarx 2 IOCs
  • PyPI
    libcpuhydraintel all versions
    MAL-2023-3927 checkmarx 2 IOCs
  • PyPI
    esqramcv all versions
    MAL-2023-3320 checkmarx 2 IOCs
  • PyPI
    esqpepmaskram all versions
    MAL-2023-3182 checkmarx 2 IOCs
  • PyPI
    tprandpullstudy all versions
    MAL-2023-7534 checkmarx 2 IOCs
  • PyPI
    tpproofreplace all versions
    MAL-2023-7413 checkmarx 2 IOCs
  • PyPI
    py-ramsplitcandy all versions
    MAL-2023-5557 checkmarx 2 IOCs
  • PyPI
    esqstudykillrand all versions
    MAL-2023-3453 checkmarx 2 IOCs
  • PyPI
    esqnvidiahttpvm all versions
    MAL-2023-3131 checkmarx 2 IOCs
  • PyPI
    esqmccvvirtual all versions
    MAL-2023-3098 checkmarx 2 IOCs
  • PyPI
    esqloadvercv all versions
    MAL-2023-3074 checkmarx 2 IOCs
  • PyPI
    selfpyping all versions
    MAL-2023-6529 checkmarx 2 IOCs
  • PyPI
    selfpaypalad all versions
    MAL-2023-6384 checkmarx 2 IOCs
  • PyPI
    py-pingcraftmc all versions
    MAL-2023-5426 checkmarx 2 IOCs
  • PyPI
    py-intelvm all versions
    MAL-2023-5241 checkmarx 2 IOCs
  • PyPI
    py-hydraosinthydra all versions
    MAL-2023-5199 checkmarx 2 IOCs
  • PyPI
    libhttpcvurl all versions
    MAL-2023-4068 checkmarx 2 IOCs
  • PyPI
    esqvisaint all versions
    MAL-2023-3544 checkmarx 2 IOCs
  • PyPI
    esqpullkill all versions
    MAL-2023-3265 checkmarx 2 IOCs
  • PyPI
    esqosintvmpull all versions
    MAL-2023-3163 checkmarx 2 IOCs
  • PyPI
    esqminepysuper all versions
    MAL-2023-3126 checkmarx 2 IOCs
  • PyPI
    tploadpingrand all versions
    MAL-2023-7233 checkmarx 2 IOCs
  • PyPI
    tplibtoolhacked all versions
    MAL-2023-7216 checkmarx 2 IOCs
  • PyPI
    selfvmpyw all versions
    MAL-2023-6799 checkmarx 2 IOCs
  • PyPI
    selfsplitpip all versions
    MAL-2023-6621 checkmarx 2 IOCs
  • PyPI
    libpingvisagui all versions
    MAL-2023-4319 checkmarx 2 IOCs