Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    esqrepy all versions
    MAL-2023-3379 checkmarx 2 IOCs
  • PyPI
    selfrecpu all versions
    MAL-2023-6590 checkmarx 2 IOCs
  • PyPI
    selfpyver all versions
    MAL-2023-6533 checkmarx 2 IOCs
  • PyPI
    selfposthydra all versions
    MAL-2023-6472 checkmarx 2 IOCs
  • PyPI
    selfgametool all versions
    MAL-2023-6088 checkmarx 2 IOCs
  • PyPI
    libstudypyw all versions
    MAL-2023-4536 checkmarx 2 IOCs
  • PyPI
    selfcpusplit all versions
    MAL-2023-5998 checkmarx 2 IOCs
  • PyPI
    py-cpucandy all versions
    MAL-2023-5041 checkmarx 2 IOCs
  • PyPI
    esqpywload all versions
    MAL-2023-3306 checkmarx 2 IOCs
  • PyPI
    esqpushstudy all versions
    MAL-2023-3287 checkmarx 2 IOCs
  • PyPI
    py-virtualpaypal all versions
    MAL-2023-5755 checkmarx 2 IOCs
  • PyPI
    libpaypalmc all versions
    MAL-2023-4284 checkmarx 2 IOCs
  • PyPI
    esqpywcv all versions
    MAL-2023-3301 checkmarx 2 IOCs
  • PyPI
    esqpeppost all versions
    MAL-2023-3183 checkmarx 2 IOCs
  • PyPI
    py-pullpy all versions
    MAL-2023-5506 checkmarx 2 IOCs
  • PyPI
    esqnvidiasplit all versions
    MAL-2023-3141 checkmarx 2 IOCs
  • PyPI
    selfstudytool all versions
    MAL-2023-6668 checkmarx 2 IOCs
  • PyPI
    selfvmreplace all versions
    MAL-2023-6801 checkmarx 2 IOCs
  • PyPI
    selfrandomram all versions
    MAL-2023-6583 checkmarx 2 IOCs
  • PyPI
    selfhttppyw all versions
    MAL-2023-6172 checkmarx 2 IOCs
  • PyPI
    tppepultra all versions
    MAL-2023-7342 checkmarx 2 IOCs
  • PyPI
    libverpy all versions
    MAL-2023-4615 checkmarx 2 IOCs
  • PyPI
    libultraget all versions
    MAL-2023-4576 checkmarx 2 IOCs
  • PyPI
    esqintelosint all versions
    MAL-2023-2996 checkmarx 2 IOCs
  • PyPI
    esqcpupy all versions
    MAL-2023-2796 checkmarx 2 IOCs
  • PyPI
    selfurlcpu all versions
    MAL-2023-6720 checkmarx 2 IOCs
  • PyPI
    esqccmask all versions
    MAL-2023-2756 checkmarx 2 IOCs
  • PyPI
    selfinforandom all versions
    MAL-2023-6211 checkmarx 2 IOCs
  • PyPI
    libproofpong all versions
    MAL-2023-4370 checkmarx 2 IOCs
  • PyPI
    selfhydramask all versions
    MAL-2023-6184 checkmarx 2 IOCs
  • PyPI
    py-getcandy all versions
    MAL-2023-5115 checkmarx 2 IOCs
  • PyPI
    tppepsplit all versions
    MAL-2023-7341 checkmarx 2 IOCs
  • PyPI
    selflibcv all versions
    MAL-2023-6270 checkmarx 2 IOCs
  • PyPI
    tpvmpy all versions
    MAL-2023-7743 checkmarx 2 IOCs
  • PyPI
    py-grandstr all versions
    MAL-2023-5135 checkmarx 2 IOCs
  • PyPI
    libosintkill all versions
    MAL-2023-4268 checkmarx 2 IOCs
  • PyPI
    selfsplitpush all versions
    MAL-2023-6622 checkmarx 2 IOCs
  • PyPI
    selfpostmc all versions
    MAL-2023-6473 checkmarx 2 IOCs
  • PyPI
    libvisainfo all versions
    MAL-2023-4642 checkmarx 2 IOCs
  • PyPI
    librandompush all versions
    MAL-2023-4460 checkmarx 2 IOCs