Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in selftoolpyget (PyPI)
- Feb 27, 2023
Malicious code in selfcontrolmaskreplace (PyPI)
- Feb 27, 2023
Malicious code in py-vermaskram (PyPI)
- Feb 27, 2023
Malicious code in libreurlping (PyPI)
- Feb 27, 2023
Malicious code in libreplacegrandencode (PyPI)
- Feb 27, 2023
Malicious code in libkillpushpost (PyPI)
- Feb 27, 2023
Malicious code in libguipaypalnvidia (PyPI)
- Feb 27, 2023
Malicious code in esqosintgetsplit (PyPI)
- Feb 27, 2023
Malicious code in tpultraintelcontrol (PyPI)
- Feb 27, 2023
Malicious code in selfvirtualcontrolultra (PyPI)
- Feb 27, 2023
Malicious code in selfpaypalencodeget (PyPI)
- Feb 27, 2023
Malicious code in py-supergamelib (PyPI)
- Feb 27, 2023
Malicious code in py-cvrandnvidia (PyPI)
- Feb 27, 2023
Malicious code in libadhackedsplit (PyPI)
- Feb 27, 2023
Malicious code in esqcandyosintsplit (PyPI)
- Feb 27, 2023
Malicious code in tpvmpipsplit (PyPI)
- Feb 27, 2023
Malicious code in selfpullgetlib (PyPI)
- Feb 27, 2023
Malicious code in selfmineinfocraft (PyPI)
- Feb 27, 2023
Malicious code in selfhackedloadnvidia (PyPI)
- Feb 27, 2023
Malicious code in py-supervirtualmc (PyPI)
- Feb 27, 2023
Malicious code in py-killlibrand (PyPI)
- Feb 27, 2023
Malicious code in libguipushload (PyPI)
- Feb 27, 2023
Malicious code in libguiposthacked (PyPI)
- Feb 27, 2023
Malicious code in esqcontrolpongpull (PyPI)
- Feb 27, 2023
Malicious code in esqcandypongmask (PyPI)
- Feb 27, 2023
Malicious code in selfinfolibtool (PyPI)
- Feb 27, 2023
Malicious code in py-pinggrandnvidia (PyPI)
- Feb 27, 2023
Malicious code in py-paypalstrcpu (PyPI)
- Feb 27, 2023
Malicious code in py-libmcstring (PyPI)
- Feb 27, 2023
Malicious code in esqintelpipstudy (PyPI)
- Feb 27, 2023
Malicious code in esqinfohttpreplace (PyPI)
- Feb 27, 2023
Malicious code in tpvisaencodegrand (PyPI)
- Feb 27, 2023
Malicious code in tpinfocved (PyPI)
- Feb 27, 2023
Malicious code in tpccrandgame (PyPI)
- Feb 27, 2023
Malicious code in selfminehydravisa (PyPI)
- Feb 27, 2023
Malicious code in selfmaskosintpyw (PyPI)
- Feb 27, 2023
Malicious code in libcontroladed (PyPI)
- Feb 27, 2023
Malicious code in esqkillinfocontrol (PyPI)
- Feb 27, 2023
Malicious code in tppushpushre (PyPI)
- Feb 27, 2023
Malicious code in tposintedhacked (PyPI)
- Feb 27, 2023
Malicious code in tpintstudytool (PyPI)
- Feb 27, 2023
Malicious code in py-infovirtualgame (PyPI)
- Feb 27, 2023
Malicious code in libramloadgame (PyPI)
- Feb 27, 2023
Malicious code in esqverrandcandy (PyPI)
- Feb 27, 2023
Malicious code in esqpycraftpost (PyPI)
- Feb 27, 2023
Malicious code in esqosintsuperosint (PyPI)
- Feb 27, 2023
Malicious code in tpedstringurl (PyPI)
- Feb 27, 2023
Malicious code in libsplitminecraft (PyPI)
- Feb 27, 2023
Malicious code in esqpostpyencode (PyPI)
- Feb 27, 2023
Malicious code in esqosintloadvm (PyPI)
Page 129 of 232