Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    tploadpep all versions
    MAL-2023-7232 checkmarx 2 IOCs
  • PyPI
    tpgamepip all versions
    MAL-2023-7036 checkmarx 2 IOCs
  • PyPI
    py-rere all versions
    MAL-2023-5613 checkmarx 2 IOCs
  • PyPI
    esqpaypalhydra all versions
    MAL-2023-3166 checkmarx 2 IOCs
  • PyPI
    selfultracraft all versions
    MAL-2023-6702 checkmarx 2 IOCs
  • PyPI
    selfinfoencode all versions
    MAL-2023-6195 checkmarx 2 IOCs
  • PyPI
    selfhackedencode all versions
    MAL-2023-6146 checkmarx 2 IOCs
  • PyPI
    selfcvhttp all versions
    MAL-2023-6016 checkmarx 2 IOCs
  • PyPI
    py-adget all versions
    MAL-2023-4987 checkmarx 2 IOCs
  • PyPI
    esqlgtbad all versions
    MAL-2023-3039 checkmarx 2 IOCs
  • PyPI
    esqadrandom all versions
    MAL-2023-2737 checkmarx 2 IOCs
  • PyPI
    selfmasksuper all versions
    MAL-2023-6313 checkmarx 2 IOCs
  • PyPI
    selfcpugrand all versions
    MAL-2023-5985 checkmarx 2 IOCs
  • PyPI
    libsuperint all versions
    MAL-2023-4547 checkmarx 2 IOCs
  • PyPI
    libultrastring all versions
    MAL-2023-4581 checkmarx 2 IOCs
  • PyPI
    libhttpcc all versions
    MAL-2023-4067 checkmarx 2 IOCs
  • PyPI
    esqvirtualpush all versions
    MAL-2023-3538 checkmarx 2 IOCs
  • PyPI
    esqrere all versions
    MAL-2023-3383 checkmarx 2 IOCs
  • PyPI
    tpgrandmask all versions
    MAL-2023-7065 checkmarx 2 IOCs
  • PyPI
    py-maskhacked all versions
    MAL-2023-5319 checkmarx 2 IOCs
  • PyPI
    libosinturl all versions
    MAL-2023-4278 checkmarx 2 IOCs
  • PyPI
    esqrandram all versions
    MAL-2023-3351 checkmarx 2 IOCs
  • PyPI
    selfhttppy all versions
    MAL-2023-6171 checkmarx 2 IOCs
  • PyPI
    selfgamepost all versions
    MAL-2023-6078 checkmarx 2 IOCs
  • PyPI
    py-pushget all versions
    MAL-2023-5513 checkmarx 2 IOCs
  • PyPI
    py-killinfo all versions
    MAL-2023-5257 checkmarx 2 IOCs
  • PyPI
    tpurllib all versions
    MAL-2023-7685 checkmarx 2 IOCs
  • PyPI
    libtoolinfo all versions
    MAL-2023-4562 checkmarx 2 IOCs
  • PyPI
    libstrad all versions
    MAL-2023-4504 checkmarx 2 IOCs
  • PyPI
    libcpuram all versions
    MAL-2023-3932 checkmarx 2 IOCs
  • PyPI
    esqsplitpy all versions
    MAL-2023-3405 checkmarx 2 IOCs
  • PyPI
    selflgtbpaypal all versions
    MAL-2023-6261 checkmarx 2 IOCs
  • PyPI
    selfcraftint all versions
    MAL-2023-6003 checkmarx 2 IOCs
  • PyPI
    esqintelping all versions
    MAL-2023-2997 checkmarx 2 IOCs
  • PyPI
    esqgetintel all versions
    MAL-2023-2893 checkmarx 2 IOCs
  • PyPI
    tpcraftcandy all versions
    MAL-2023-6972 checkmarx 2 IOCs
  • PyPI
    py-grandpep all versions
    MAL-2023-5131 checkmarx 2 IOCs
  • PyPI
    selfpywgame all versions
    MAL-2023-6535 checkmarx 2 IOCs
  • PyPI
    esqgettool all versions
    MAL-2023-2902 checkmarx 2 IOCs
  • PyPI
    tppyproof all versions
    MAL-2023-7474 checkmarx 2 IOCs