Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    libloadgame all versions
    MAL-2023-4192 checkmarx 2 IOCs
  • PyPI
    tpsplitultra all versions
    MAL-2023-7597 checkmarx 2 IOCs
  • PyPI
    selfproofpingpaypal all versions
    MAL-2023-6493 checkmarx 2 IOCs
  • PyPI
    libgrandloadcv all versions
    MAL-2023-4020 checkmarx 2 IOCs
  • PyPI
    selfstrvisapaypal all versions
    MAL-2023-6657 checkmarx 2 IOCs
  • PyPI
    py-pywencode all versions
    MAL-2023-5534 checkmarx 2 IOCs
  • PyPI
    esqccinfo all versions
    MAL-2023-2755 checkmarx 2 IOCs
  • PyPI
    tploadget all versions
    MAL-2023-7222 checkmarx 2 IOCs
  • PyPI
    selflgtbhttp all versions
    MAL-2023-6258 checkmarx 2 IOCs
  • PyPI
    py-randpushint all versions
    MAL-2023-5582 checkmarx 2 IOCs
  • PyPI
    py-getcontrolvm all versions
    MAL-2023-5118 checkmarx 2 IOCs
  • PyPI
    esqcraftrammc all versions
    MAL-2023-2811 checkmarx 2 IOCs
  • PyPI
    libtoolpepcv all versions
    MAL-2023-4567 checkmarx 2 IOCs
  • PyPI
    selfosintcv all versions
    MAL-2023-6361 checkmarx 2 IOCs
  • PyPI
    py-encodelib all versions
    MAL-2023-5092 checkmarx 2 IOCs
  • PyPI
    libponginfo all versions
    MAL-2023-4333 checkmarx 2 IOCs
  • PyPI
    selfvmad all versions
    MAL-2023-6789 checkmarx 2 IOCs
  • PyPI
    selfurlsuper all versions
    MAL-2023-6730 checkmarx 2 IOCs
  • PyPI
    selfpepsplit all versions
    MAL-2023-6415 checkmarx 2 IOCs
  • PyPI
    py-raminfo all versions
    MAL-2023-5551 checkmarx 2 IOCs
  • PyPI
    py-infopy all versions
    MAL-2023-5218 checkmarx 2 IOCs
  • PyPI
    libvisagui all versions
    MAL-2023-4640 checkmarx 2 IOCs
  • PyPI
    esqtoolencode all versions
    MAL-2023-3476 checkmarx 2 IOCs
  • PyPI
    tptoolmc all versions
    MAL-2023-7662 checkmarx 2 IOCs
  • PyPI
    tpstrhttp all versions
    MAL-2023-7603 checkmarx 2 IOCs
  • PyPI
    tplibpy all versions
    MAL-2023-7213 checkmarx 2 IOCs
  • PyPI
    selfurlload all versions
    MAL-2023-6724 checkmarx 2 IOCs
  • PyPI
    selfurlgui all versions
    MAL-2023-6722 checkmarx 2 IOCs
  • PyPI
    selfstringkill all versions
    MAL-2023-6635 checkmarx 2 IOCs
  • PyPI
    selflibpep all versions
    MAL-2023-6275 checkmarx 2 IOCs
  • PyPI
    selfinfopong all versions
    MAL-2023-6206 checkmarx 2 IOCs
  • PyPI
    libmaskintel all versions
    MAL-2023-4207 checkmarx 2 IOCs
  • PyPI
    esqpostlib all versions
    MAL-2023-3233 checkmarx 2 IOCs
  • PyPI
    esqloadurl all versions
    MAL-2023-3073 checkmarx 2 IOCs
  • PyPI
    tpstringpep all versions
    MAL-2023-7613 checkmarx 2 IOCs
  • PyPI
    selfgrandrand all versions
    MAL-2023-6122 checkmarx 2 IOCs
  • PyPI
    py-ultraping all versions
    MAL-2023-5711 checkmarx 2 IOCs
  • PyPI
    libtoolosint all versions
    MAL-2023-4566 checkmarx 2 IOCs
  • PyPI
    libpippy all versions
    MAL-2023-4328 checkmarx 2 IOCs
  • PyPI
    liblgtbhydra all versions
    MAL-2023-4159 checkmarx 2 IOCs