Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,619 total in pypi · sorted newest first- Mar 2, 2023
Malicious code in py-proofnvidiavm (PyPI)
- Mar 2, 2023
Malicious code in esqhttpguicc (PyPI)
- Mar 2, 2023
Malicious code in esqpepintpyw (PyPI)
- Mar 2, 2023
Malicious code in esqpaypalnvidiaurl (PyPI)
- Mar 2, 2023
Malicious code in librereplacereplace (PyPI)
- Mar 2, 2023
Malicious code in py-ultrageturl (PyPI)
- Mar 2, 2023
Malicious code in tppylgtbnvidia (PyPI)
- Mar 2, 2023
Malicious code in esqrerecandy (PyPI)
- Mar 2, 2023
Malicious code in libgetrandram (PyPI)
- Mar 2, 2023
Malicious code in esqpeprandpaypal (PyPI)
- Mar 2, 2023
Malicious code in tppyrandomed (PyPI)
- Mar 2, 2023
Malicious code in py-hydraurlstudy (PyPI)
- Mar 2, 2023
Malicious code in esqhackedlgtbpip (PyPI)
- Mar 2, 2023
Malicious code in tptoolpywgui (PyPI)
- Mar 2, 2023
Malicious code in selfhackedrandomstudy (PyPI)
- Mar 2, 2023
Malicious code in esqultraultrapong (PyPI)
- Mar 2, 2023
Malicious code in selfvisapostosint (PyPI)
- Feb 27, 2023
Malicious code in py-hackedultratool (PyPI)
- Feb 27, 2023
Malicious code in libccreplacemask (PyPI)
- Feb 27, 2023
Malicious code in selfreplacetoolreplace (PyPI)
- Feb 27, 2023
Malicious code in py-vmpullinfo (PyPI)
- Feb 27, 2023
Malicious code in libguicraftcandy (PyPI)
- Feb 27, 2023
Malicious code in selfstrresuper (PyPI)
- Feb 27, 2023
Malicious code in py-pushpingload (PyPI)
- Feb 27, 2023
Malicious code in libkilledgame (PyPI)
- Feb 27, 2023
Malicious code in selfcvedpep (PyPI)
- Feb 27, 2023
Malicious code in tpreplacekillram (PyPI)
- Feb 27, 2023
Malicious code in py-postvirtualreplace (PyPI)
- Feb 27, 2023
Malicious code in librandomintelgame (PyPI)
- Feb 27, 2023
Malicious code in esqrecpuvm (PyPI)
- Feb 27, 2023
Malicious code in libpiposintmc (PyPI)
- Feb 27, 2023
Malicious code in esqvisastred (PyPI)
- Feb 27, 2023
Malicious code in esqtoolvisaram (PyPI)
- Feb 27, 2023
Malicious code in esqosinthackedstudy (PyPI)
- Feb 27, 2023
Malicious code in tpstudystringpep (PyPI)
- Feb 27, 2023
Malicious code in tppushvmgrand (PyPI)
- Feb 27, 2023
Malicious code in selfcandyhttpnvidia (PyPI)
- Feb 27, 2023
Malicious code in libpullurlcandy (PyPI)
- Feb 27, 2023
Malicious code in libintproofpush (PyPI)
- Feb 27, 2023
Malicious code in esqnvidiapaypalmask (PyPI)
- Feb 27, 2023
Malicious code in py-pepminepy (PyPI)
- Feb 27, 2023
Malicious code in esqtoolultralgtb (PyPI)
- Feb 27, 2023
Malicious code in libsuperintram (PyPI)
- Feb 27, 2023
Malicious code in libstrpushkill (PyPI)
- Feb 27, 2023
Malicious code in esqverinfostr (PyPI)
- Feb 27, 2023
Malicious code in py-proofsplitpy (PyPI)
- Feb 27, 2023
Malicious code in libvisacvcontrol (PyPI)
- Feb 27, 2023
Malicious code in tpramcced (PyPI)
- Feb 27, 2023
Malicious code in tpadmaskcandy (PyPI)
- Feb 27, 2023
Malicious code in libhackedkillcontrol (PyPI)
Page 109 of 233