Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in py-ramgrandad (PyPI)
- Feb 26, 2023
Malicious code in py-peprandcandy (PyPI)
- Feb 26, 2023
Malicious code in py-getccre (PyPI)
- Feb 26, 2023
Malicious code in libramkillpip (PyPI)
- Feb 26, 2023
Malicious code in esqrandompushgrand (PyPI)
- Feb 26, 2023
Malicious code in esqlibpiptool (PyPI)
- Feb 26, 2023
Malicious code in esqkillproofcv (PyPI)
- Feb 26, 2023
Malicious code in esqintelcandyload (PyPI)
- Feb 26, 2023
Malicious code in tpurladpy (PyPI)
- Feb 26, 2023
Malicious code in selfpywgetget (PyPI)
- Feb 26, 2023
Malicious code in py-guiurlkill (PyPI)
- Feb 26, 2023
Malicious code in libverpulled (PyPI)
- Feb 26, 2023
Malicious code in libintelkillinfo (PyPI)
- Feb 26, 2023
Malicious code in esqminestrpong (PyPI)
- Feb 26, 2023
Malicious code in esqmineencodekill (PyPI)
- Feb 26, 2023
Malicious code in esqhydrastudyre (PyPI)
- Feb 26, 2023
Malicious code in tpadvmpip (PyPI)
- Feb 26, 2023
Malicious code in selfhackedramcc (PyPI)
- Feb 26, 2023
Malicious code in py-randomcandycraft (PyPI)
- Feb 26, 2023
Malicious code in py-pywrandomvisa (PyPI)
- Feb 26, 2023
Malicious code in py-cvintpy (PyPI)
- Feb 26, 2023
Malicious code in libosintramcontrol (PyPI)
- Feb 26, 2023
Malicious code in esqstrintelsplit (PyPI)
- Feb 26, 2023
Malicious code in esqsplitosintint (PyPI)
- Feb 26, 2023
Malicious code in tpintelgetlib (PyPI)
- Feb 26, 2023
Malicious code in selfpepreplaceload (PyPI)
- Feb 26, 2023
Malicious code in libvirtualpipvisa (PyPI)
- Feb 26, 2023
Malicious code in libedlgtbreplace (PyPI)
- Feb 26, 2023
Malicious code in esqvmmineping (PyPI)
- Feb 26, 2023
Malicious code in esqpushadcpu (PyPI)
- Feb 26, 2023
Malicious code in tppostcandynvidia (PyPI)
- Feb 26, 2023
Malicious code in tpmaskmcpush (PyPI)
- Feb 26, 2023
Malicious code in tpgamegetnvidia (PyPI)
- Feb 26, 2023
Malicious code in selfpaypalloadpaypal (PyPI)
- Feb 26, 2023
Malicious code in py-stringpingpost (PyPI)
- Feb 26, 2023
Malicious code in py-randomsplitram (PyPI)
- Feb 26, 2023
Malicious code in py-paypalintellgtb (PyPI)
- Feb 26, 2023
Malicious code in libstringpostmask (PyPI)
- Feb 26, 2023
Malicious code in tpsuperosintmask (PyPI)
- Feb 26, 2023
Malicious code in tppinghydrainfo (PyPI)
- Feb 26, 2023
Malicious code in py-replaceedpong (PyPI)
- Feb 26, 2023
Malicious code in py-paypalgetmine (PyPI)
- Feb 26, 2023
Malicious code in libpushgetkill (PyPI)
- Feb 26, 2023
Malicious code in esqnvidiastringcv (PyPI)
- Feb 26, 2023
Malicious code in tpcvgrandhacked (PyPI)
- Feb 26, 2023
Malicious code in selftoolinfoint (PyPI)
- Feb 26, 2023
Malicious code in selfproofnvidiagrand (PyPI)
- Feb 26, 2023
Malicious code in py-prooflibhydra (PyPI)
- Feb 26, 2023
Malicious code in py-paypalvirtualcv (PyPI)
- Feb 26, 2023
Malicious code in esqstringpepcv (PyPI)
Page 133 of 232