Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tphttpvisa all versions
    MAL-2023-7119 checkmarx 2 IOCs
  • PyPI
    selfstrad all versions
    MAL-2023-6629 checkmarx 2 IOCs
  • PyPI
    selfpingmaskstring all versions
    MAL-2023-6428 checkmarx 2 IOCs
  • PyPI
    py-craftlib all versions
    MAL-2023-5055 checkmarx 2 IOCs
  • PyPI
    esqtoolrandomgui all versions
    MAL-2023-3485 checkmarx 2 IOCs
  • PyPI
    tprerelib all versions
    MAL-2023-7574 checkmarx 2 IOCs
  • PyPI
    tpintelpyw all versions
    MAL-2023-7163 checkmarx 2 IOCs
  • PyPI
    selfpongcv all versions
    MAL-2023-6454 checkmarx 2 IOCs
  • PyPI
    selfintelguimc all versions
    MAL-2023-6222 checkmarx 2 IOCs
  • PyPI
    selfencodetoolgui all versions
    MAL-2023-6062 checkmarx 2 IOCs
  • PyPI
    libpostpull all versions
    MAL-2023-4360 checkmarx 2 IOCs
  • PyPI
    libencodeliburl all versions
    MAL-2023-3980 checkmarx 2 IOCs
  • PyPI
    esqrandomhydra all versions
    MAL-2023-3337 checkmarx 2 IOCs
  • PyPI
    tppepgui all versions
    MAL-2023-7334 checkmarx 2 IOCs
  • PyPI
    tpmchttp all versions
    MAL-2023-7259 checkmarx 2 IOCs
  • PyPI
    tpintellib all versions
    MAL-2023-7159 checkmarx 2 IOCs
  • PyPI
    tphttpsplit all versions
    MAL-2023-7117 checkmarx 2 IOCs
  • PyPI
    selfkillpullpaypal all versions
    MAL-2023-6250 checkmarx 2 IOCs
  • PyPI
    esqstringkillmine all versions
    MAL-2023-3415 checkmarx 2 IOCs
  • PyPI
    esqloadstringstring all versions
    MAL-2023-3072 checkmarx 2 IOCs
  • PyPI
    esqccminepy all versions
    MAL-2023-2757 checkmarx 2 IOCs
  • PyPI
    tpmaskpepvm all versions
    MAL-2023-7246 checkmarx 2 IOCs
  • PyPI
    tpgamemask all versions
    MAL-2023-7034 checkmarx 2 IOCs
  • PyPI
    selfpostsuper all versions
    MAL-2023-6481 checkmarx 2 IOCs
  • PyPI
    libtoolurl all versions
    MAL-2023-4572 checkmarx 2 IOCs
  • PyPI
    libreplaceguipush all versions
    MAL-2023-4477 checkmarx 2 IOCs
  • PyPI
    libosintlgtbstudy all versions
    MAL-2023-4269 checkmarx 2 IOCs
  • PyPI
    libcontrolintel all versions
    MAL-2023-3908 checkmarx 2 IOCs
  • PyPI
    selfkillvirtualhydra all versions
    MAL-2023-6254 checkmarx 2 IOCs
  • PyPI
    selfcandylgtbintel all versions
    MAL-2023-5950 checkmarx 2 IOCs
  • PyPI
    py-nvidiapepcontrol all versions
    MAL-2023-5367 checkmarx 2 IOCs
  • PyPI
    selfcvping all versions
    MAL-2023-6022 checkmarx 2 IOCs
  • PyPI
    selfcandyrand all versions
    MAL-2023-5951 checkmarx 2 IOCs
  • PyPI
    libosintgrandinfo all versions
    MAL-2023-4265 checkmarx 2 IOCs
  • PyPI
    esqlibad all versions
    MAL-2023-3046 checkmarx 2 IOCs
  • PyPI
    selfvirtualstrsuper all versions
    MAL-2023-6767 checkmarx 2 IOCs
  • PyPI
    selfgamepipsplit all versions
    MAL-2023-6076 checkmarx 2 IOCs
  • PyPI
    libproofproofproof all versions
    MAL-2023-4371 checkmarx 2 IOCs
  • PyPI
    esqmineget all versions
    MAL-2023-3117 checkmarx 2 IOCs
  • PyPI
    selfguilibrand all versions
    MAL-2023-6130 checkmarx 2 IOCs