Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,619 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in selfcraftpipvirtual (PyPI)
- Feb 27, 2023
Malicious code in esqpullcraftlgtb (PyPI)
- Feb 27, 2023
Malicious code in esqgameultracandy (PyPI)
- Feb 27, 2023
Malicious code in tppullccre (PyPI)
- Feb 27, 2023
Malicious code in tppostreplacevisa (PyPI)
- Feb 27, 2023
Malicious code in selfproofhttpsplit (PyPI)
- Feb 27, 2023
Malicious code in tppeppullintel (PyPI)
- Feb 27, 2023
Malicious code in selfrandsplitre (PyPI)
- Feb 27, 2023
Malicious code in selfpullrecontrol (PyPI)
- Feb 27, 2023
Malicious code in esqedpypy (PyPI)
- Feb 27, 2023
Malicious code in selfrandominfoping (PyPI)
- Feb 27, 2023
Malicious code in selfpullgamegame (PyPI)
- Feb 27, 2023
Malicious code in tpmaskpushre (PyPI)
- Feb 27, 2023
Malicious code in esqverpaypalsuper (PyPI)
- Feb 27, 2023
Malicious code in tposintponghydra (PyPI)
- Feb 27, 2023
Malicious code in selfpostultraultra (PyPI)
- Feb 27, 2023
Malicious code in selfnvidiapushhacked (PyPI)
- Feb 27, 2023
Malicious code in selfgrandkillhacked (PyPI)
- Feb 27, 2023
Malicious code in py-pullgrandinfo (PyPI)
- Feb 27, 2023
Malicious code in libloadurlrand (PyPI)
- Feb 27, 2023
Malicious code in esqsupergrandstr (PyPI)
- Feb 27, 2023
Malicious code in tpgrandreplacerand (PyPI)
- Feb 27, 2023
Malicious code in selfpingponggui (PyPI)
- Feb 27, 2023
Malicious code in py-lgtbpywhttp (PyPI)
- Feb 27, 2023
Malicious code in py-lgtbpyhacked (PyPI)
- Feb 27, 2023
Malicious code in py-adpaypalkill (PyPI)
- Feb 27, 2023
Malicious code in libinforampy (PyPI)
- Feb 27, 2023
Malicious code in libgrandrammc (PyPI)
- Feb 27, 2023
Malicious code in esqpushhttpad (PyPI)
- Feb 27, 2023
Malicious code in esqcvcraftmc (PyPI)
- Feb 27, 2023
Malicious code in tpsplitpaypalmask (PyPI)
- Feb 27, 2023
Malicious code in tploadgrandhttp (PyPI)
- Feb 27, 2023
Malicious code in selfvirtualstringvisa (PyPI)
- Feb 27, 2023
Malicious code in selfpostgamemc (PyPI)
- Feb 27, 2023
Malicious code in libintmccontrol (PyPI)
- Feb 27, 2023
Malicious code in esqintelrevirtual (PyPI)
- Feb 27, 2023
Malicious code in py-randvisavisa (PyPI)
- Feb 27, 2023
Malicious code in py-intpywcandy (PyPI)
- Feb 27, 2023
Malicious code in esqstrencodehacked (PyPI)
- Feb 27, 2023
Malicious code in esqpaypalpulled (PyPI)
- Feb 27, 2023
Malicious code in tpvirtualintelmask (PyPI)
- Feb 27, 2023
Malicious code in liblgtbpushpost (PyPI)
- Feb 27, 2023
Malicious code in libintelurllgtb (PyPI)
- Feb 27, 2023
Malicious code in libinfovirtualcontrol (PyPI)
- Feb 27, 2023
Malicious code in libloadcraftcv (PyPI)
- Feb 27, 2023
Malicious code in esqrandultrare (PyPI)
- Feb 27, 2023
Malicious code in selfultramineint (PyPI)
- Feb 27, 2023
Malicious code in libsupergrandpull (PyPI)
- Feb 27, 2023
Malicious code in tpstrstrram (PyPI)
- Feb 27, 2023
Malicious code in tpreplacepushstudy (PyPI)
Page 110 of 233