Skip to content
OpenAdvisories

Supply chain

Malicious packages · PyPI

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,173 npm 223,994 PyPI 12,029 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

12,029 reports · Feed

  • PyPI
    selfproofurl all versions
    MAL-2023-6500 checkmarx 2 IOCs
  • PyPI
    py-nvidiamc all versions
    MAL-2023-5365 checkmarx 2 IOCs
  • PyPI
    esqpullpull all versions
    MAL-2023-3270 checkmarx 2 IOCs
  • PyPI
    esqgameinfo all versions
    MAL-2023-2872 checkmarx 2 IOCs
  • PyPI
    tppipvm all versions
    MAL-2023-7373 checkmarx 2 IOCs
  • PyPI
    selfultraver all versions
    MAL-2023-6717 checkmarx 2 IOCs
  • PyPI
    selfsupered all versions
    MAL-2023-6672 checkmarx 2 IOCs
  • PyPI
    selfccpyw all versions
    MAL-2023-5962 checkmarx 2 IOCs
  • PyPI
    py-pepvisa all versions
    MAL-2023-5424 checkmarx 2 IOCs
  • PyPI
    py-randmc all versions
    MAL-2023-5565 checkmarx 2 IOCs
  • PyPI
    libsuperpyw all versions
    MAL-2023-4555 checkmarx 2 IOCs
  • PyPI
    libgamehacked all versions
    MAL-2023-3993 checkmarx 2 IOCs
  • PyPI
    tpcvre all versions
    MAL-2023-6993 checkmarx 2 IOCs
  • PyPI
    py-gamecv all versions
    MAL-2023-5105 checkmarx 2 IOCs
  • PyPI
    libgrandver all versions
    MAL-2023-4029 checkmarx 2 IOCs
  • PyPI
    esqhttpreplace all versions
    MAL-2023-2959 checkmarx 2 IOCs
  • PyPI
    selfpushcv all versions
    MAL-2023-6516 checkmarx 2 IOCs
  • PyPI
    py-lgtbhacked all versions
    MAL-2023-5274 checkmarx 2 IOCs
  • PyPI
    esqcvpost all versions
    MAL-2023-2828 checkmarx 2 IOCs
  • PyPI
    libpullpull all versions
    MAL-2023-4383 checkmarx 2 IOCs
  • PyPI
    libintelpaypal all versions
    MAL-2023-4119 checkmarx 2 IOCs
  • PyPI
    esqpostintel all versions
    MAL-2023-3231 checkmarx 2 IOCs
  • PyPI
    tpkillproof all versions
    MAL-2023-7190 checkmarx 2 IOCs
  • PyPI
    libposthacked all versions
    MAL-2023-4351 checkmarx 2 IOCs
  • PyPI
    libgameinfo all versions
    MAL-2023-3994 checkmarx 2 IOCs
  • PyPI
    selfpostcontrol all versions
    MAL-2023-6467 checkmarx 2 IOCs
  • PyPI
    py-mcosint all versions
    MAL-2023-5336 checkmarx 2 IOCs
  • PyPI
    tppywget all versions
    MAL-2023-7482 checkmarx 2 IOCs
  • PyPI
    libultracc all versions
    MAL-2023-4574 checkmarx 2 IOCs
  • PyPI
    esqvisakill all versions
    MAL-2023-3545 checkmarx 2 IOCs
  • PyPI
    esqresuper all versions
    MAL-2023-3387 checkmarx 2 IOCs
  • PyPI
    esqpingencode all versions
    MAL-2023-3196 checkmarx 2 IOCs
  • PyPI
    esqlibcontrol all versions
    MAL-2023-3048 checkmarx 2 IOCs
  • PyPI
    esqhydraload all versions
    MAL-2023-2967 checkmarx 2 IOCs
  • PyPI
    tpintver all versions
    MAL-2023-7178 checkmarx 2 IOCs
  • PyPI
    py-hackedvisa all versions
    MAL-2023-5172 checkmarx 2 IOCs
  • PyPI
    py-guistring all versions
    MAL-2023-5146 checkmarx 2 IOCs
  • PyPI
    libpingpyw all versions
    MAL-2023-4312 checkmarx 2 IOCs
  • PyPI
    libguirandom all versions
    MAL-2023-4045 checkmarx 2 IOCs
  • PyPI
    esqmaskstr all versions
    MAL-2023-3092 checkmarx 2 IOCs