Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpvirtualrandom all versions
    MAL-2023-7715 checkmarx 2 IOCs
  • PyPI
    tppongpy all versions
    MAL-2023-7382 checkmarx 2 IOCs
  • PyPI
    selfsplitultra all versions
    MAL-2023-6628 checkmarx 2 IOCs
  • PyPI
    py-hydrahacked all versions
    MAL-2023-5196 checkmarx 2 IOCs
  • PyPI
    py-cvsplit all versions
    MAL-2023-5075 checkmarx 2 IOCs
  • PyPI
    tpstudyvirtual all versions
    MAL-2023-7642 checkmarx 2 IOCs
  • PyPI
    tpsplitstudy all versions
    MAL-2023-7596 checkmarx 2 IOCs
  • PyPI
    tphackedad all versions
    MAL-2023-7089 checkmarx 2 IOCs
  • PyPI
    selframproof all versions
    MAL-2023-6558 checkmarx 2 IOCs
  • PyPI
    esqhackedmask all versions
    MAL-2023-2943 checkmarx 2 IOCs
  • PyPI
    esqccre all versions
    MAL-2023-2766 checkmarx 2 IOCs
  • PyPI
    py-pongnvidia all versions
    MAL-2023-5458 checkmarx 2 IOCs
  • PyPI
    py-edpush all versions
    MAL-2023-5086 checkmarx 2 IOCs
  • PyPI
    libintelcv all versions
    MAL-2023-4114 checkmarx 2 IOCs
  • PyPI
    libgamevisa all versions
    MAL-2023-3998 checkmarx 2 IOCs
  • PyPI
    py-paypalhttp all versions
    MAL-2023-5394 checkmarx 2 IOCs
  • PyPI
    libcontrolgui all versions
    MAL-2023-3902 checkmarx 2 IOCs
  • PyPI
    esqpullpep all versions
    MAL-2023-3269 checkmarx 2 IOCs
  • PyPI
    esqgrandpull all versions
    MAL-2023-2917 checkmarx 2 IOCs
  • PyPI
    tpvirtualurl all versions
    MAL-2023-7717 checkmarx 2 IOCs
  • PyPI
    esqencodemask all versions
    MAL-2023-2856 checkmarx 2 IOCs
  • PyPI
    selfhttppep all versions
    MAL-2023-6168 checkmarx 2 IOCs
  • PyPI
    py-randommine all versions
    MAL-2023-5575 checkmarx 2 IOCs
  • PyPI
    selfguiad all versions
    MAL-2023-6125 checkmarx 2 IOCs
  • PyPI
    libvirtualpull all versions
    MAL-2023-4631 checkmarx 2 IOCs
  • PyPI
    selfpongencode all versions
    MAL-2023-6456 checkmarx 2 IOCs
  • PyPI
    selfcvvirtual all versions
    MAL-2023-6029 checkmarx 2 IOCs
  • PyPI
    libvmnvidia all versions
    MAL-2023-4658 checkmarx 2 IOCs
  • PyPI
    selfpongcpu all versions
    MAL-2023-6453 checkmarx 2 IOCs
  • PyPI
    selfpingram all versions
    MAL-2023-6432 checkmarx 2 IOCs
  • PyPI
    py-visapip all versions
    MAL-2023-5766 checkmarx 2 IOCs
  • PyPI
    py-pushcc all versions
    MAL-2023-5511 checkmarx 2 IOCs
  • PyPI
    libedgui all versions
    MAL-2023-3969 checkmarx 2 IOCs
  • PyPI
    esqgrandpaypal all versions
    MAL-2023-2914 checkmarx 2 IOCs
  • PyPI
    tpguied all versions
    MAL-2023-7078 checkmarx 2 IOCs
  • PyPI
    selfstudyhydra all versions
    MAL-2023-6660 checkmarx 2 IOCs
  • PyPI
    selfgamesplit all versions
    MAL-2023-6084 checkmarx 2 IOCs
  • PyPI
    py-ultrarandom all versions
    MAL-2023-5716 checkmarx 2 IOCs
  • PyPI
    libstudystring all versions
    MAL-2023-4540 checkmarx 2 IOCs
  • PyPI
    libminekill all versions
    MAL-2023-4242 checkmarx 2 IOCs