Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    selftoolmask all versions
    MAL-2023-6692 checkmarx 2 IOCs
  • PyPI
    selfcpuinfo all versions
    MAL-2023-5986 checkmarx 2 IOCs
  • PyPI
    py-vmvm all versions
    MAL-2023-5792 checkmarx 2 IOCs
  • PyPI
    py-hackedurl all versions
    MAL-2023-5171 checkmarx 2 IOCs
  • PyPI
    libguiping all versions
    MAL-2023-4040 checkmarx 2 IOCs
  • PyPI
    tprecandy all versions
    MAL-2023-7540 checkmarx 2 IOCs
  • PyPI
    selfosintget all versions
    MAL-2023-6363 checkmarx 2 IOCs
  • PyPI
    py-guigrand all versions
    MAL-2023-5139 checkmarx 2 IOCs
  • PyPI
    libtoolstudy all versions
    MAL-2023-4571 checkmarx 2 IOCs
  • PyPI
    esqhttpinfo all versions
    MAL-2023-2951 checkmarx 2 IOCs
  • PyPI
    tpurlintel all versions
    MAL-2023-7684 checkmarx 2 IOCs
  • PyPI
    selfvergame all versions
    MAL-2023-6734 checkmarx 2 IOCs
  • PyPI
    py-postpull all versions
    MAL-2023-5473 checkmarx 2 IOCs
  • PyPI
    liburlurl all versions
    MAL-2023-4600 checkmarx 2 IOCs
  • PyPI
    esqrandultra all versions
    MAL-2023-3352 checkmarx 2 IOCs
  • PyPI
    tprandcandy all versions
    MAL-2023-7515 checkmarx 2 IOCs
  • PyPI
    selfreplacesplit all versions
    MAL-2023-6608 checkmarx 2 IOCs
  • PyPI
    py-ramhacked all versions
    MAL-2023-5549 checkmarx 2 IOCs
  • PyPI
    py-lgtbrand all versions
    MAL-2023-5282 checkmarx 2 IOCs
  • PyPI
    libvmmc all versions
    MAL-2023-4657 checkmarx 2 IOCs
  • PyPI
    tppaypalsuper all versions
    MAL-2023-7328 checkmarx 2 IOCs
  • PyPI
    selfintsuper all versions
    MAL-2023-6236 checkmarx 2 IOCs
  • PyPI
    libhttpkill all versions
    MAL-2023-4072 checkmarx 2 IOCs
  • PyPI
    esqrandominfo all versions
    MAL-2023-3339 checkmarx 2 IOCs
  • PyPI
    esqproofproof all versions
    MAL-2023-3252 checkmarx 2 IOCs
  • PyPI
    esqkillstring all versions
    MAL-2023-3036 checkmarx 2 IOCs
  • PyPI
    tpvercontrol all versions
    MAL-2023-7692 checkmarx 2 IOCs
  • PyPI
    py-stringrandom all versions
    MAL-2023-5638 checkmarx 2 IOCs
  • PyPI
    py-killnvidia all versions
    MAL-2023-5264 checkmarx 2 IOCs
  • PyPI
    py-httpencode all versions
    MAL-2023-5175 checkmarx 2 IOCs
  • PyPI
    libhackedcv all versions
    MAL-2023-4053 checkmarx 2 IOCs
  • PyPI
    py-repull all versions
    MAL-2023-5611 checkmarx 2 IOCs
  • PyPI
    libhackedstr all versions
    MAL-2023-4064 checkmarx 2 IOCs
  • PyPI
    esqstringnvidia all versions
    MAL-2023-3419 checkmarx 2 IOCs
  • PyPI
    tpultrainfo all versions
    MAL-2023-7672 checkmarx 2 IOCs
  • PyPI
    py-rever all versions
    MAL-2023-5616 checkmarx 2 IOCs
  • PyPI
    libreplacepong all versions
    MAL-2023-4482 checkmarx 2 IOCs
  • PyPI
    libintelram all versions
    MAL-2023-4122 checkmarx 2 IOCs
  • PyPI
    py-grandre all versions
    MAL-2023-5134 checkmarx 2 IOCs
  • PyPI
    libkillcandy all versions
    MAL-2023-4134 checkmarx 2 IOCs