Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,619 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in py-superrecc (PyPI)
- Feb 27, 2023
Malicious code in esqpywpepcraft (PyPI)
- Feb 27, 2023
Malicious code in selfurlminecontrol (PyPI)
- Feb 27, 2023
Malicious code in selfcpuintelpip (PyPI)
- Feb 27, 2023
Malicious code in esqstrpushgrand (PyPI)
- Feb 27, 2023
Malicious code in libmasklibosint (PyPI)
- Feb 27, 2023
Malicious code in tpcpuramhttp (PyPI)
- Feb 27, 2023
Malicious code in selfminemasked (PyPI)
- Feb 27, 2023
Malicious code in libpushmasklgtb (PyPI)
- Feb 27, 2023
Malicious code in selfpongencodeintel (PyPI)
- Feb 27, 2023
Malicious code in py-candynvidiakill (PyPI)
- Feb 27, 2023
Malicious code in tposinthackedstring (PyPI)
- Feb 27, 2023
Malicious code in tpcpustrvm (PyPI)
- Feb 27, 2023
Malicious code in selfverccint (PyPI)
- Feb 27, 2023
Malicious code in tpsplitpushpush (PyPI)
- Feb 27, 2023
Malicious code in tpinforandcpu (PyPI)
- Feb 27, 2023
Malicious code in selfpippongpip (PyPI)
- Feb 27, 2023
Malicious code in py-verreplacesplit (PyPI)
- Feb 27, 2023
Malicious code in py-hydracontrolget (PyPI)
- Feb 27, 2023
Malicious code in esqintstringcraft (PyPI)
- Feb 27, 2023
Malicious code in tpintgrandre (PyPI)
- Feb 27, 2023
Malicious code in tpgetadstr (PyPI)
- Feb 27, 2023
Malicious code in selfosintsplithydra (PyPI)
- Feb 27, 2023
Malicious code in py-osintvirtualload (PyPI)
- Feb 27, 2023
Malicious code in py-cpupipgame (PyPI)
- Feb 27, 2023
Malicious code in libverpullpong (PyPI)
- Feb 27, 2023
Malicious code in esqvirtualkillsuper (PyPI)
- Feb 27, 2023
Malicious code in tphttplgtbrandom (PyPI)
- Feb 27, 2023
Malicious code in tpccguipip (PyPI)
- Feb 27, 2023
Malicious code in selfintelpullpost (PyPI)
- Feb 27, 2023
Malicious code in py-piposintpaypal (PyPI)
- Feb 27, 2023
Malicious code in py-libloadcandy (PyPI)
- Feb 27, 2023
Malicious code in py-cpuintre (PyPI)
- Feb 27, 2023
Malicious code in librehackedpull (PyPI)
- Feb 27, 2023
Malicious code in libintelpostlib (PyPI)
- Feb 27, 2023
Malicious code in libedgetstudy (PyPI)
- Feb 27, 2023
Malicious code in esqnvidiavmget (PyPI)
- Feb 27, 2023
Malicious code in tphydracvmask (PyPI)
- Feb 27, 2023
Malicious code in tpcraftvisasuper (PyPI)
- Feb 27, 2023
Malicious code in selfreplaceencodepush (PyPI)
- Feb 27, 2023
Malicious code in selfintmaskreplace (PyPI)
- Feb 27, 2023
Malicious code in py-httpgrandpong (PyPI)
- Feb 27, 2023
Malicious code in libgrandrandomintel (PyPI)
- Feb 27, 2023
Malicious code in libadtoolmc (PyPI)
- Feb 27, 2023
Malicious code in tpcvverencode (PyPI)
- Feb 27, 2023
Malicious code in py-pingvisarandom (PyPI)
- Feb 27, 2023
Malicious code in libpostpongmc (PyPI)
- Feb 27, 2023
Malicious code in tphttppullload (PyPI)
- Feb 27, 2023
Malicious code in selfpullcchydra (PyPI)
- Feb 27, 2023
Malicious code in py-revisaram (PyPI)
Page 116 of 233