Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in selfgameedultra (PyPI)
- Feb 27, 2023
Malicious code in py-ramurlencode (PyPI)
- Feb 27, 2023
Malicious code in py-postcandymc (PyPI)
- Feb 27, 2023
Malicious code in py-mcvergame (PyPI)
- Feb 27, 2023
Malicious code in libsplitvirtualload (PyPI)
- Feb 27, 2023
Malicious code in esqtoolgetnvidia (PyPI)
- Feb 27, 2023
Malicious code in esqcraftloadpost (PyPI)
- Feb 27, 2023
Malicious code in esqccguihydra (PyPI)
- Feb 27, 2023
Malicious code in tpproofsplitint (PyPI)
- Feb 27, 2023
Malicious code in tpmineguipong (PyPI)
- Feb 27, 2023
Malicious code in selfpingspliturl (PyPI)
- Feb 27, 2023
Malicious code in selfpingcrafttool (PyPI)
- Feb 27, 2023
Malicious code in py-visapongmask (PyPI)
- Feb 27, 2023
Malicious code in py-tooladcraft (PyPI)
- Feb 27, 2023
Malicious code in py-ramstrencode (PyPI)
- Feb 27, 2023
Malicious code in py-minepingsplit (PyPI)
- Feb 27, 2023
Malicious code in py-intelmcad (PyPI)
- Feb 27, 2023
Malicious code in libpepcandymc (PyPI)
- Feb 27, 2023
Malicious code in libnvidiacpustr (PyPI)
- Feb 27, 2023
Malicious code in selfrandompywosint (PyPI)
- Feb 27, 2023
Malicious code in py-toolpaypalhydra (PyPI)
- Feb 27, 2023
Malicious code in libosintultrapyw (PyPI)
- Feb 27, 2023
Malicious code in libcvcandycontrol (PyPI)
- Feb 27, 2023
Malicious code in tpgametoolcontrol (PyPI)
- Feb 27, 2023
Malicious code in tpcpumcsuper (PyPI)
- Feb 27, 2023
Malicious code in tpcandygrandpost (PyPI)
- Feb 27, 2023
Malicious code in selfvmvisahacked (PyPI)
- Feb 27, 2023
Malicious code in selfpaypaladvm (PyPI)
- Feb 27, 2023
Malicious code in libgrandpaypalget (PyPI)
- Feb 27, 2023
Malicious code in esqpaypalpephydra (PyPI)
- Feb 27, 2023
Malicious code in esqadcvmc (PyPI)
- Feb 27, 2023
Malicious code in selfpostpywver (PyPI)
- Feb 27, 2023
Malicious code in selfosintrecandy (PyPI)
- Feb 27, 2023
Malicious code in py-supercandyreplace (PyPI)
- Feb 27, 2023
Malicious code in py-intedreplace (PyPI)
- Feb 27, 2023
Malicious code in libpostcpupaypal (PyPI)
- Feb 27, 2023
Malicious code in libedkillcraft (PyPI)
- Feb 27, 2023
Malicious code in esqtoolminemask (PyPI)
- Feb 27, 2023
Malicious code in esqencodetoolsuper (PyPI)
- Feb 27, 2023
Malicious code in tpstrposturl (PyPI)
- Feb 27, 2023
Malicious code in tpstrmaskpy (PyPI)
- Feb 27, 2023
Malicious code in py-osintgrandpush (PyPI)
- Feb 27, 2023
Malicious code in libnvidiacvmc (PyPI)
- Feb 27, 2023
Malicious code in esqguihttphydra (PyPI)
- Feb 27, 2023
Malicious code in tppullcpupull (PyPI)
- Feb 27, 2023
Malicious code in tppingloadgui (PyPI)
- Feb 27, 2023
Malicious code in tpcandyrandping (PyPI)
- Feb 27, 2023
Malicious code in selfverstrad (PyPI)
- Feb 27, 2023
Malicious code in py-adproofosint (PyPI)
- Feb 27, 2023
Malicious code in tprevmlib (PyPI)
Page 124 of 232