Supply chain
Malicious packages · PyPI
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
12,022 reports · Feed
-
PyPI
artifact-lab-3-package-24ddbc49 0.7.0, 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0, 0.6.0MAL-2024-9451 ossf-package-analysis, kam193
- PyPI
-
PyPI
artifact-lab-3-package-db7d716a 0.1.1, 1.0.1, 1.0.0, 1.0.2, 1.0.8, 1.0.9, 1.1.0MAL-2024-8927 ossf-package-analysis, kam193
-
PyPI
artifact-lab-3-package-4c04b1a2 1.0.3, 0.1.1, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 1.0.0, 1.0.1, 1.0.5, 1.0.2, 1.0.4MAL-2024-8914 ossf-package-analysis, kam193
-
PyPI
artifact-lab-3-package-3eef6c2c 0.2.0, 0.3.0MAL-2024-8051 ossf-package-analysis, reversing-labs, kam193
- PyPI
-
PyPI
artifact-lab-3-package-6e10193e 0.3.5, 0.3.4, 0.3.3, 0.3.8, 0.3.6, 0.3.7MAL-2024-8047 ossf-package-analysis, kam193
- PyPI
- PyPI
-
PyPI
artifact-lab-3-package-2b6a4744 0.3.1, 0.3.2, 0.1.1, 0.2.0, 0.3.0, 2.0.0MAL-2024-8044 ossf-package-analysis, kam193
- PyPI
- PyPI
- PyPI
-
PyPI
artifact-lab-3-package-7e532784 0.1.0, 0.1.3, 0.1.4, 0.1.6, 0.1.8, 0.1.12, 0.1.15, 0.1.14, 0.1.1, 0.1.2MAL-2024-8022 ossf-package-analysis, kam193
-
PyPI
artifact-lab-3-package-392c6acd 0.1.0, 0.1.1, 0.1.3, 0.1.2, 0.1.4, 0.1.5, 0.1.6, 0.1.12, 0.1.7, 0.1.14, 0.1.19,…MAL-2024-8017 ossf-package-analysis, kam193
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI
-
PyPI
artifact-lab-3-package-b1ec2b9f 0.1, 0.1.1, 0.2.0, 0.2.1, 0.2.3, 0.2.4MAL-2024-11527 reversing-labs, kam193
-
PyPI
artifact-lab-3-package-736f752d 0.1.2, 0.1.1, 0.1.3, 0.1.4MAL-2024-10541 ossf-package-analysis, kam193
-
PyPI
artifact-lab-3-package-02f73e0e 1.0.1, 1.0.4, 1.0.2, 1.0.3, 0.1.2, 0.1.1MAL-2024-10473 ossf-package-analysis, kam193
- PyPI
- PyPI
- PyPI
- PyPI
- PyPI