Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    py-postget all versions
    MAL-2023-5468 checkmarx 2 IOCs
  • PyPI
    py-encodeurl all versions
    MAL-2023-5102 checkmarx 2 IOCs
  • PyPI
    libgrandpong all versions
    MAL-2023-4025 checkmarx 2 IOCs
  • PyPI
    tpvirtualhttp all versions
    MAL-2023-7707 checkmarx 2 IOCs
  • PyPI
    py-vmstudy all versions
    MAL-2023-5791 checkmarx 2 IOCs
  • PyPI
    py-paypalpyw all versions
    MAL-2023-5402 checkmarx 2 IOCs
  • PyPI
    esqgrandvm all versions
    MAL-2023-2923 checkmarx 2 IOCs
  • PyPI
    selfverrand all versions
    MAL-2023-6749 checkmarx 2 IOCs
  • PyPI
    py-libpull all versions
    MAL-2023-5295 checkmarx 2 IOCs
  • PyPI
    esqsplitstr all versions
    MAL-2023-3407 checkmarx 2 IOCs
  • PyPI
    esqloadcandy all versions
    MAL-2023-3065 checkmarx 2 IOCs
  • PyPI
    selfsupervisa all versions
    MAL-2023-6684 checkmarx 2 IOCs
  • PyPI
    selfintelcpu all versions
    MAL-2023-6219 checkmarx 2 IOCs
  • PyPI
    py-getlib all versions
    MAL-2023-5121 checkmarx 2 IOCs
  • PyPI
    esqminecv all versions
    MAL-2023-3115 checkmarx 2 IOCs
  • PyPI
    tpsplitram all versions
    MAL-2023-7593 checkmarx 2 IOCs
  • PyPI
    selfrehttp all versions
    MAL-2023-6594 checkmarx 2 IOCs
  • PyPI
    esqcandyinfo all versions
    MAL-2023-2744 checkmarx 2 IOCs
  • PyPI
    py-peppy all versions
    MAL-2023-5419 checkmarx 2 IOCs
  • PyPI
    esqcpurand all versions
    MAL-2023-2797 checkmarx 2 IOCs
  • PyPI
    tpgamehacked all versions
    MAL-2023-7030 checkmarx 2 IOCs
  • PyPI
    esqminekill all versions
    MAL-2023-3121 checkmarx 2 IOCs
  • PyPI
    py-randver all versions
    MAL-2023-5585 checkmarx 2 IOCs
  • PyPI
    py-gameram all versions
    MAL-2023-5110 checkmarx 2 IOCs
  • PyPI
    py-encoderam all versions
    MAL-2023-5098 checkmarx 2 IOCs
  • PyPI
    esqvisaencode all versions
    MAL-2023-3543 checkmarx 2 IOCs
  • PyPI
    selfccgame all versions
    MAL-2023-5956 checkmarx 2 IOCs
  • PyPI
    py-toolkill all versions
    MAL-2023-5692 checkmarx 2 IOCs
  • PyPI
    esqlibpost all versions
    MAL-2023-3058 checkmarx 2 IOCs
  • PyPI
    esqcved all versions
    MAL-2023-2821 checkmarx 2 IOCs
  • PyPI
    tpreplacepush all versions
    MAL-2023-7564 checkmarx 2 IOCs
  • PyPI
    selfpullint all versions
    MAL-2023-6505 checkmarx 2 IOCs
  • PyPI
    py-osintvisa all versions
    MAL-2023-5390 checkmarx 2 IOCs
  • PyPI
    esqsplitping all versions
    MAL-2023-3401 checkmarx 2 IOCs
  • PyPI
    esqlibkill all versions
    MAL-2023-3051 checkmarx 2 IOCs
  • PyPI
    tppyinfo all versions
    MAL-2023-7461 checkmarx 2 IOCs
  • PyPI
    py-reget all versions
    MAL-2023-5591 checkmarx 2 IOCs
  • PyPI
    esqstudycpu all versions
    MAL-2023-3447 checkmarx 2 IOCs
  • PyPI
    esqpymask all versions
    MAL-2023-3294 checkmarx 2 IOCs
  • PyPI
    esqpepstudy all versions
    MAL-2023-3190 checkmarx 2 IOCs