Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tpstrcpu all versions
    MAL-2023-7601 checkmarx 2 IOCs
  • PyPI
    selfstringlib all versions
    MAL-2023-6637 checkmarx 2 IOCs
  • PyPI
    selframstring all versions
    MAL-2023-6562 checkmarx 2 IOCs
  • PyPI
    py-hydrapy all versions
    MAL-2023-5202 checkmarx 2 IOCs
  • PyPI
    libosintinfo all versions
    MAL-2023-4267 checkmarx 2 IOCs
  • PyPI
    esqosintpull all versions
    MAL-2023-3156 checkmarx 2 IOCs
  • PyPI
    selfpepvirtual all versions
    MAL-2023-6420 checkmarx 2 IOCs
  • PyPI
    py-urlvm all versions
    MAL-2023-5730 checkmarx 2 IOCs
  • PyPI
    py-splitload all versions
    MAL-2023-5622 checkmarx 2 IOCs
  • PyPI
    libpostcandy all versions
    MAL-2023-4346 checkmarx 2 IOCs
  • PyPI
    tpgetosint all versions
    MAL-2023-7049 checkmarx 2 IOCs
  • PyPI
    py-encodeping all versions
    MAL-2023-5093 checkmarx 2 IOCs
  • PyPI
    libstringstr all versions
    MAL-2023-4518 checkmarx 2 IOCs
  • PyPI
    esqpippip all versions
    MAL-2023-3211 checkmarx 2 IOCs
  • PyPI
    esqpingint all versions
    MAL-2023-3198 checkmarx 2 IOCs
  • PyPI
    tpsuperpyw all versions
    MAL-2023-7653 checkmarx 2 IOCs
  • PyPI
    tpintelrandom all versions
    MAL-2023-7165 checkmarx 2 IOCs
  • PyPI
    py-intstring all versions
    MAL-2023-5252 checkmarx 2 IOCs
  • PyPI
    libloadram all versions
    MAL-2023-4199 checkmarx 2 IOCs
  • PyPI
    esqstringpong all versions
    MAL-2023-3425 checkmarx 2 IOCs
  • PyPI
    py-strrandom all versions
    MAL-2023-5653 checkmarx 2 IOCs
  • PyPI
    esqcvproof all versions
    MAL-2023-2829 checkmarx 2 IOCs
  • PyPI
    selfkilllgtb all versions
    MAL-2023-6248 checkmarx 2 IOCs
  • PyPI
    esqstringpaypal all versions
    MAL-2023-3421 checkmarx 2 IOCs
  • PyPI
    esqpywencode all versions
    MAL-2023-3302 checkmarx 2 IOCs
  • PyPI
    esqpostcpu all versions
    MAL-2023-3225 checkmarx 2 IOCs
  • PyPI
    esqgamemask all versions
    MAL-2023-2876 checkmarx 2 IOCs
  • PyPI
    selfreplacereplace all versions
    MAL-2023-6607 checkmarx 2 IOCs
  • PyPI
    esqintelreplace all versions
    MAL-2023-3001 checkmarx 2 IOCs
  • PyPI
    tplgtbpull all versions
    MAL-2023-7205 checkmarx 2 IOCs
  • PyPI
    py-craftmine all versions
    MAL-2023-5056 checkmarx 2 IOCs
  • PyPI
    selfurlcraft all versions
    MAL-2023-6721 checkmarx 2 IOCs
  • PyPI
    tpgrandcontrol all versions
    MAL-2023-7059 checkmarx 2 IOCs
  • PyPI
    selframlgtb all versions
    MAL-2023-6556 checkmarx 2 IOCs
  • PyPI
    py-reencode all versions
    MAL-2023-5590 checkmarx 2 IOCs
  • PyPI
    esqgrandsuper all versions
    MAL-2023-2921 checkmarx 2 IOCs
  • PyPI
    tpstudyver all versions
    MAL-2023-7641 checkmarx 2 IOCs
  • PyPI
    selfsplitlib all versions
    MAL-2023-6620 checkmarx 2 IOCs
  • PyPI
    py-ponghacked all versions
    MAL-2023-5456 checkmarx 2 IOCs
  • PyPI
    libcpuvm all versions
    MAL-2023-3935 checkmarx 2 IOCs