Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    libcvverstr all versions
    MAL-2023-3966 checkmarx 2 IOCs
  • PyPI
    tpinfoproof all versions
    MAL-2023-7140 checkmarx 2 IOCs
  • PyPI
    tphackedrandomstring all versions
    MAL-2023-7104 checkmarx 2 IOCs
  • PyPI
    tpcontrolram all versions
    MAL-2023-6954 checkmarx 2 IOCs
  • PyPI
    selfintgame all versions
    MAL-2023-6226 checkmarx 2 IOCs
  • PyPI
    py-virtualhydra all versions
    MAL-2023-5752 checkmarx 2 IOCs
  • PyPI
    py-pongpostmask all versions
    MAL-2023-5461 checkmarx 2 IOCs
  • PyPI
    librandomvm all versions
    MAL-2023-4462 checkmarx 2 IOCs
  • PyPI
    libpipcraftload all versions
    MAL-2023-4323 checkmarx 2 IOCs
  • PyPI
    esqvisapullre all versions
    MAL-2023-3550 checkmarx 2 IOCs
  • PyPI
    tphackedsplitcraft all versions
    MAL-2023-7106 checkmarx 2 IOCs
  • PyPI
    tpguimask all versions
    MAL-2023-7084 checkmarx 2 IOCs
  • PyPI
    selfpingcc all versions
    MAL-2023-6421 checkmarx 2 IOCs
  • PyPI
    selfencodevmcontrol all versions
    MAL-2023-6065 checkmarx 2 IOCs
  • PyPI
    py-randomcpu all versions
    MAL-2023-5568 checkmarx 2 IOCs
  • PyPI
    libosintmask all versions
    MAL-2023-4271 checkmarx 2 IOCs
  • PyPI
    esqpullrandomsplit all versions
    MAL-2023-3272 checkmarx 2 IOCs
  • PyPI
    tprelibpost all versions
    MAL-2023-7550 checkmarx 2 IOCs
  • PyPI
    tppiposintpost all versions
    MAL-2023-7364 checkmarx 2 IOCs
  • PyPI
    py-libvirtualram all versions
    MAL-2023-5300 checkmarx 2 IOCs
  • PyPI
    liblgtbstudy all versions
    MAL-2023-4174 checkmarx 2 IOCs
  • PyPI
    esqramreplace all versions
    MAL-2023-3325 checkmarx 2 IOCs
  • PyPI
    tpvminfopep all versions
    MAL-2023-7737 checkmarx 2 IOCs
  • PyPI
    tpsplitverpy all versions
    MAL-2023-7598 checkmarx 2 IOCs
  • PyPI
    selfurlhttp all versions
    MAL-2023-6723 checkmarx 2 IOCs
  • PyPI
    selfmccv all versions
    MAL-2023-6321 checkmarx 2 IOCs
  • PyPI
    py-cpurandom all versions
    MAL-2023-5051 checkmarx 2 IOCs
  • PyPI
    esqverrand all versions
    MAL-2023-3527 checkmarx 2 IOCs
  • PyPI
    esqsplitvm all versions
    MAL-2023-3409 checkmarx 2 IOCs
  • PyPI
    selfadcpu all versions
    MAL-2023-5934 checkmarx 2 IOCs
  • PyPI
    py-candycvproof all versions
    MAL-2023-5002 checkmarx 2 IOCs
  • PyPI
    libsuperhydrainfo all versions
    MAL-2023-4545 checkmarx 2 IOCs
  • PyPI
    libstringvmed all versions
    MAL-2023-4521 checkmarx 2 IOCs
  • PyPI
    libsplitencode all versions
    MAL-2023-4492 checkmarx 2 IOCs
  • PyPI
    esqsplitpepcv all versions
    MAL-2023-3399 checkmarx 2 IOCs
  • PyPI
    esqpywrandom all versions
    MAL-2023-3315 checkmarx 2 IOCs
  • PyPI
    tpvmmc all versions
    MAL-2023-7739 checkmarx 2 IOCs
  • PyPI
    py-proofencode all versions
    MAL-2023-5482 checkmarx 2 IOCs
  • PyPI
    selfpongreplaceed all versions
    MAL-2023-6463 checkmarx 2 IOCs
  • PyPI
    selfcandyultralib all versions
    MAL-2023-5953 checkmarx 2 IOCs