Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    libpingget all versions
    MAL-2023-4307 checkmarx 2 IOCs
  • PyPI
    selfverkill all versions
    MAL-2023-6740 checkmarx 2 IOCs
  • PyPI
    selfadpush all versions
    MAL-2023-5943 checkmarx 2 IOCs
  • PyPI
    libstrpull all versions
    MAL-2023-4524 checkmarx 2 IOCs
  • PyPI
    selfstrreplace all versions
    MAL-2023-6650 checkmarx 2 IOCs
  • PyPI
    py-pywping all versions
    MAL-2023-5536 checkmarx 2 IOCs
  • PyPI
    libproofkill all versions
    MAL-2023-4368 checkmarx 2 IOCs
  • PyPI
    esqpywvirtual all versions
    MAL-2023-3319 checkmarx 2 IOCs
  • PyPI
    tphackedencode all versions
    MAL-2023-7093 checkmarx 2 IOCs
  • PyPI
    esqpongping all versions
    MAL-2023-3219 checkmarx 2 IOCs
  • PyPI
    py-pongpep all versions
    MAL-2023-5459 checkmarx 2 IOCs
  • PyPI
    esqadkill all versions
    MAL-2023-2729 checkmarx 2 IOCs
  • PyPI
    selfpywrandom all versions
    MAL-2023-6548 checkmarx 2 IOCs
  • PyPI
    libguilib all versions
    MAL-2023-4037 checkmarx 2 IOCs
  • PyPI
    tpguistring all versions
    MAL-2023-7087 checkmarx 2 IOCs
  • PyPI
    selfultravirtual all versions
    MAL-2023-6718 checkmarx 2 IOCs
  • PyPI
    selfhydrakill all versions
    MAL-2023-6182 checkmarx 2 IOCs
  • PyPI
    py-killlib all versions
    MAL-2023-5261 checkmarx 2 IOCs
  • PyPI
    esqrandomgui all versions
    MAL-2023-3335 checkmarx 2 IOCs
  • PyPI
    tptoolkill all versions
    MAL-2023-7659 checkmarx 2 IOCs
  • PyPI
    libultralib all versions
    MAL-2023-4577 checkmarx 2 IOCs
  • PyPI
    libpywgui all versions
    MAL-2023-4419 checkmarx 2 IOCs
  • PyPI
    libcandygame all versions
    MAL-2023-3876 checkmarx 2 IOCs
  • PyPI
    esqrandver all versions
    MAL-2023-3354 checkmarx 2 IOCs
  • PyPI
    esqccpy all versions
    MAL-2023-2764 checkmarx 2 IOCs
  • PyPI
    tphydraencode all versions
    MAL-2023-7122 checkmarx 2 IOCs
  • PyPI
    py-replacepyw all versions
    MAL-2023-5605 checkmarx 2 IOCs
  • PyPI
    libpongload all versions
    MAL-2023-4335 checkmarx 2 IOCs
  • PyPI
    liblgtbpong all versions
    MAL-2023-4165 checkmarx 2 IOCs
  • PyPI
    libgetstudy all versions
    MAL-2023-4010 checkmarx 2 IOCs
  • PyPI
    esqhydratool all versions
    MAL-2023-2973 checkmarx 2 IOCs
  • PyPI
    tppypip all versions
    MAL-2023-7472 checkmarx 2 IOCs
  • PyPI
    selfpongurl all versions
    MAL-2023-6465 checkmarx 2 IOCs
  • PyPI
    selfpepad all versions
    MAL-2023-6403 checkmarx 2 IOCs
  • PyPI
    libmaskvirtual all versions
    MAL-2023-4220 checkmarx 2 IOCs
  • PyPI
    libinforam all versions
    MAL-2023-4105 checkmarx 2 IOCs
  • PyPI
    esqrandmask all versions
    MAL-2023-3333 checkmarx 2 IOCs
  • PyPI
    esqramhydra all versions
    MAL-2023-3323 checkmarx 2 IOCs
  • PyPI
    selfencodeload all versions
    MAL-2023-6050 checkmarx 2 IOCs
  • PyPI
    libpullgui all versions
    MAL-2023-4379 checkmarx 2 IOCs