Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    selflgtbpep all versions
    MAL-2023-6262 checkmarx 2 IOCs
  • PyPI
    esqintelpush all versions
    MAL-2023-2999 checkmarx 2 IOCs
  • PyPI
    libreplaceintel all versions
    MAL-2023-4479 checkmarx 2 IOCs
  • PyPI
    selfmaskvisa all versions
    MAL-2023-6316 checkmarx 2 IOCs
  • PyPI
    py-randreplace all versions
    MAL-2023-5583 checkmarx 2 IOCs
  • PyPI
    py-hydramc all versions
    MAL-2023-5198 checkmarx 2 IOCs
  • PyPI
    libmaskver all versions
    MAL-2023-4219 checkmarx 2 IOCs
  • PyPI
    libcraftosint all versions
    MAL-2023-3944 checkmarx 2 IOCs
  • PyPI
    libcandystr all versions
    MAL-2023-3885 checkmarx 2 IOCs
  • PyPI
    tposintvirtual all versions
    MAL-2023-7317 checkmarx 2 IOCs
  • PyPI
    tpmcvirtual all versions
    MAL-2023-7268 checkmarx 2 IOCs
  • PyPI
    tpcandypong all versions
    MAL-2023-6929 checkmarx 2 IOCs
  • PyPI
    selfhackedlib all versions
    MAL-2023-6149 checkmarx 2 IOCs
  • PyPI
    py-httppong all versions
    MAL-2023-5180 checkmarx 2 IOCs
  • PyPI
    libsupervisa all versions
    MAL-2023-4557 checkmarx 2 IOCs
  • PyPI
    tppywstudy all versions
    MAL-2023-7495 checkmarx 2 IOCs
  • PyPI
    selfstrpyw all versions
    MAL-2023-6649 checkmarx 2 IOCs
  • PyPI
    py-studypaypal all versions
    MAL-2023-5669 checkmarx 2 IOCs
  • PyPI
    libkillstring all versions
    MAL-2023-4149 checkmarx 2 IOCs
  • PyPI
    esqguipong all versions
    MAL-2023-2932 checkmarx 2 IOCs
  • PyPI
    selfultramc all versions
    MAL-2023-6707 checkmarx 2 IOCs
  • PyPI
    libreplaceultra all versions
    MAL-2023-4485 checkmarx 2 IOCs
  • PyPI
    libmcmine all versions
    MAL-2023-4232 checkmarx 2 IOCs
  • PyPI
    libcpupep all versions
    MAL-2023-3930 checkmarx 2 IOCs
  • PyPI
    esqccvirtual all versions
    MAL-2023-2773 checkmarx 2 IOCs
  • PyPI
    tpreplacecraft all versions
    MAL-2023-7554 checkmarx 2 IOCs
  • PyPI
    selfultrahydra all versions
    MAL-2023-6704 checkmarx 2 IOCs
  • PyPI
    selfproofint all versions
    MAL-2023-6487 checkmarx 2 IOCs
  • PyPI
    selfreplacevisa all versions
    MAL-2023-6612 checkmarx 2 IOCs
  • PyPI
    py-vernvidia all versions
    MAL-2023-5737 checkmarx 2 IOCs
  • PyPI
    py-pushcpu all versions
    MAL-2023-5512 checkmarx 2 IOCs
  • PyPI
    esqstrping all versions
    MAL-2023-3439 checkmarx 2 IOCs
  • PyPI
    tpvirtualpush all versions
    MAL-2023-7712 checkmarx 2 IOCs
  • PyPI
    tprandping all versions
    MAL-2023-7531 checkmarx 2 IOCs
  • PyPI
    py-guisuper all versions
    MAL-2023-5147 checkmarx 2 IOCs
  • PyPI
    py-postmine all versions
    MAL-2023-5471 checkmarx 2 IOCs
  • PyPI
    libcvstring all versions
    MAL-2023-3965 checkmarx 2 IOCs
  • PyPI
    tpproofkill all versions
    MAL-2023-7406 checkmarx 2 IOCs
  • PyPI
    liburlrandom all versions
    MAL-2023-4594 checkmarx 2 IOCs
  • PyPI
    py-minenvidia all versions
    MAL-2023-5350 checkmarx 2 IOCs