Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,619 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in py-getcvad (PyPI)
- Feb 27, 2023
Malicious code in libvisasupergrand (PyPI)
- Feb 27, 2023
Malicious code in libpyhttplgtb (PyPI)
- Feb 27, 2023
Malicious code in esqpostloadping (PyPI)
- Feb 27, 2023
Malicious code in py-strpongint (PyPI)
- Feb 27, 2023
Malicious code in esqvisastudynvidia (PyPI)
- Feb 27, 2023
Malicious code in selfosintpywmask (PyPI)
- Feb 27, 2023
Malicious code in selflgtbpostrand (PyPI)
- Feb 27, 2023
Malicious code in py-hackedpushtool (PyPI)
- Feb 27, 2023
Malicious code in tpedpingpull (PyPI)
- Feb 27, 2023
Malicious code in esqstringpingcraft (PyPI)
- Feb 27, 2023
Malicious code in tpvirtualcontrolmc (PyPI)
- Feb 27, 2023
Malicious code in selfpywpushhacked (PyPI)
- Feb 27, 2023
Malicious code in esqpostpongstr (PyPI)
- Feb 27, 2023
Malicious code in esqcpugrandpong (PyPI)
- Feb 27, 2023
Malicious code in tposintpywcraft (PyPI)
- Feb 27, 2023
Malicious code in tpguiintelget (PyPI)
- Feb 27, 2023
Malicious code in libpongkillad (PyPI)
- Feb 27, 2023
Malicious code in esqcraftguicc (PyPI)
- Feb 27, 2023
Malicious code in tpstringlgtbintel (PyPI)
- Feb 27, 2023
Malicious code in py-strlgtbstring (PyPI)
- Feb 27, 2023
Malicious code in liburlpywpost (PyPI)
- Feb 27, 2023
Malicious code in libhttppostcraft (PyPI)
- Feb 27, 2023
Malicious code in libgetmccv (PyPI)
- Feb 27, 2023
Malicious code in tpnvidiaintelpush (PyPI)
- Feb 27, 2023
Malicious code in esqlibpepgrand (PyPI)
- Feb 27, 2023
Malicious code in esqsplitpepcandy (PyPI)
- Feb 27, 2023
Malicious code in esqnvidiareosint (PyPI)
- Feb 27, 2023
Malicious code in tphackedintelhydra (PyPI)
- Feb 27, 2023
Malicious code in selfvergetcc (PyPI)
- Feb 27, 2023
Malicious code in selfproofkillcraft (PyPI)
- Feb 27, 2023
Malicious code in py-visarandomad (PyPI)
- Feb 27, 2023
Malicious code in py-randvirtualinfo (PyPI)
- Feb 27, 2023
Malicious code in py-intnvidiagui (PyPI)
- Feb 27, 2023
Malicious code in libmaskvirtualpyw (PyPI)
- Feb 27, 2023
Malicious code in esqpongpongad (PyPI)
- Feb 27, 2023
Malicious code in esqpongpingload (PyPI)
- Feb 27, 2023
Malicious code in tpsplitloadhydra (PyPI)
- Feb 27, 2023
Malicious code in tpramhttpurl (PyPI)
- Feb 27, 2023
Malicious code in tploadsplithacked (PyPI)
- Feb 27, 2023
Malicious code in tplibhydrainfo (PyPI)
- Feb 27, 2023
Malicious code in tpedramver (PyPI)
- Feb 27, 2023
Malicious code in selfosintultrahacked (PyPI)
- Feb 27, 2023
Malicious code in py-intverpyw (PyPI)
- Feb 27, 2023
Malicious code in py-httpvisagui (PyPI)
- Feb 27, 2023
Malicious code in libhydravmram (PyPI)
- Feb 27, 2023
Malicious code in libcpugamecc (PyPI)
- Feb 27, 2023
Malicious code in esqrandompingad (PyPI)
- Feb 27, 2023
Malicious code in esqloadpippost (PyPI)
- Feb 27, 2023
Malicious code in selfpyosintmine (PyPI)
Page 117 of 233