Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in selfrandompyint (PyPI)
- Feb 27, 2023
Malicious code in selfkillsplitpy (PyPI)
- Feb 27, 2023
Malicious code in libkillencodeed (PyPI)
- Feb 27, 2023
Malicious code in esqgamestringvm (PyPI)
- Feb 27, 2023
Malicious code in tppushlibpyw (PyPI)
- Feb 27, 2023
Malicious code in tpcraftlgtbload (PyPI)
- Feb 27, 2023
Malicious code in selfverpulled (PyPI)
- Feb 27, 2023
Malicious code in selfreplacemchydra (PyPI)
- Feb 27, 2023
Malicious code in selfminepywgui (PyPI)
- Feb 27, 2023
Malicious code in selfloadccpull (PyPI)
- Feb 27, 2023
Malicious code in selfinfogetrand (PyPI)
- Feb 27, 2023
Malicious code in py-strmaskmine (PyPI)
- Feb 27, 2023
Malicious code in libstrultrapush (PyPI)
- Feb 27, 2023
Malicious code in esqloadpaypalad (PyPI)
- Feb 27, 2023
Malicious code in esqkillpepproof (PyPI)
- Feb 27, 2023
Malicious code in esqhttpgetmask (PyPI)
- Feb 27, 2023
Malicious code in tphackedpullpaypal (PyPI)
- Feb 27, 2023
Malicious code in selfpywintelgrand (PyPI)
- Feb 27, 2023
Malicious code in selfliburlvirtual (PyPI)
- Feb 27, 2023
Malicious code in selfgamepongcc (PyPI)
- Feb 27, 2023
Malicious code in selfencoderampost (PyPI)
- Feb 27, 2023
Malicious code in py-strkillcraft (PyPI)
- Feb 27, 2023
Malicious code in libedencodemine (PyPI)
- Feb 27, 2023
Malicious code in esqreplaceedlgtb (PyPI)
- Feb 27, 2023
Malicious code in esqmccpunvidia (PyPI)
- Feb 27, 2023
Malicious code in esqcraftpipget (PyPI)
- Feb 27, 2023
Malicious code in tpultrarandpost (PyPI)
- Feb 27, 2023
Malicious code in tprelgtbvm (PyPI)
- Feb 27, 2023
Malicious code in tppostguistring (PyPI)
- Feb 27, 2023
Malicious code in selfverosintstring (PyPI)
- Feb 27, 2023
Malicious code in selfpywhydragui (PyPI)
- Feb 27, 2023
Malicious code in selfhackedrepong (PyPI)
- Feb 27, 2023
Malicious code in py-randnvidiapip (PyPI)
- Feb 27, 2023
Malicious code in py-mineencodeosint (PyPI)
- Feb 27, 2023
Malicious code in py-infokillpush (PyPI)
- Feb 27, 2023
Malicious code in py-httptoolstring (PyPI)
- Feb 27, 2023
Malicious code in libpongvisacpu (PyPI)
- Feb 27, 2023
Malicious code in esqpostgrandint (PyPI)
- Feb 27, 2023
Malicious code in esqcvnvidiapush (PyPI)
- Feb 27, 2023
Malicious code in selfvisavmgame (PyPI)
- Feb 27, 2023
Malicious code in selfinfoinfohydra (PyPI)
- Feb 27, 2023
Malicious code in py-virtualguipost (PyPI)
- Feb 27, 2023
Malicious code in py-randpepgrand (PyPI)
- Feb 27, 2023
Malicious code in py-pywmchydra (PyPI)
- Feb 27, 2023
Malicious code in py-pippycandy (PyPI)
- Feb 27, 2023
Malicious code in py-nvidiastringreplace (PyPI)
- Feb 27, 2023
Malicious code in libstringsplithttp (PyPI)
- Feb 27, 2023
Malicious code in libreplacemcultra (PyPI)
- Feb 27, 2023
Malicious code in esqhydraramhydra (PyPI)
- Feb 27, 2023
Malicious code in selfgrandpongcraft (PyPI)
Page 123 of 232