Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    libpongmc all versions
    MAL-2023-4336 checkmarx 2 IOCs
  • PyPI
    tpnvidiasplit all versions
    MAL-2023-7301 checkmarx 2 IOCs
  • PyPI
    selfosintver all versions
    MAL-2023-6382 checkmarx 2 IOCs
  • PyPI
    py-guireplace all versions
    MAL-2023-5144 checkmarx 2 IOCs
  • PyPI
    esqhttplgtb all versions
    MAL-2023-2953 checkmarx 2 IOCs
  • PyPI
    tpstringmask all versions
    MAL-2023-7610 checkmarx 2 IOCs
  • PyPI
    tpedinfo all versions
    MAL-2023-7000 checkmarx 2 IOCs
  • PyPI
    libcraftinfo all versions
    MAL-2023-3940 checkmarx 2 IOCs
  • PyPI
    esqintelgrand all versions
    MAL-2023-2994 checkmarx 2 IOCs
  • PyPI
    tpreplacelib all versions
    MAL-2023-7561 checkmarx 2 IOCs
  • PyPI
    tppullpy all versions
    MAL-2023-7435 checkmarx 2 IOCs
  • PyPI
    tppostsplit all versions
    MAL-2023-7398 checkmarx 2 IOCs
  • PyPI
    selfosintping all versions
    MAL-2023-6369 checkmarx 2 IOCs
  • PyPI
    selfintcv all versions
    MAL-2023-6217 checkmarx 2 IOCs
  • PyPI
    selfhttpinfo all versions
    MAL-2023-6163 checkmarx 2 IOCs
  • PyPI
    libgrandmask all versions
    MAL-2023-4021 checkmarx 2 IOCs
  • PyPI
    py-pullencode all versions
    MAL-2023-5498 checkmarx 2 IOCs
  • PyPI
    selfgetgrand all versions
    MAL-2023-6090 checkmarx 2 IOCs
  • PyPI
    libgamemine all versions
    MAL-2023-3995 checkmarx 2 IOCs
  • PyPI
    esqtoolnvidia all versions
    MAL-2023-3482 checkmarx 2 IOCs
  • PyPI
    tpvisaosint all versions
    MAL-2023-7724 checkmarx 2 IOCs
  • PyPI
    tpultragui all versions
    MAL-2023-7671 checkmarx 2 IOCs
  • PyPI
    tppullpush all versions
    MAL-2023-7434 checkmarx 2 IOCs
  • PyPI
    tppaypalmine all versions
    MAL-2023-7323 checkmarx 2 IOCs
  • PyPI
    selfsupercandy all versions
    MAL-2023-6671 checkmarx 2 IOCs
  • PyPI
    selfhttpstring all versions
    MAL-2023-6175 checkmarx 2 IOCs
  • PyPI
    esqnvidiakill all versions
    MAL-2023-3134 checkmarx 2 IOCs
  • PyPI
    esqcrafted all versions
    MAL-2023-2803 checkmarx 2 IOCs
  • PyPI
    tppywmc all versions
    MAL-2023-7488 checkmarx 2 IOCs
  • PyPI
    py-lgtbping all versions
    MAL-2023-5278 checkmarx 2 IOCs
  • PyPI
    py-intvisa all versions
    MAL-2023-5254 checkmarx 2 IOCs
  • PyPI
    py-getstr all versions
    MAL-2023-5127 checkmarx 2 IOCs
  • PyPI
    py-cvencode all versions
    MAL-2023-5065 checkmarx 2 IOCs
  • PyPI
    esqurlget all versions
    MAL-2023-3503 checkmarx 2 IOCs
  • PyPI
    tpcvinfo all versions
    MAL-2023-6988 checkmarx 2 IOCs
  • PyPI
    py-controlrand all versions
    MAL-2023-5038 checkmarx 2 IOCs
  • PyPI
    librere all versions
    MAL-2023-4489 checkmarx 2 IOCs
  • PyPI
    libmaskload all versions
    MAL-2023-4210 checkmarx 2 IOCs
  • PyPI
    tppullcv all versions
    MAL-2023-7423 checkmarx 2 IOCs
  • PyPI
    py-visagrand all versions
    MAL-2023-5762 checkmarx 2 IOCs