Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in selfrandomstrad (PyPI)
- Feb 26, 2023
Malicious code in py-toolpywnvidia (PyPI)
- Feb 26, 2023
Malicious code in py-lgtbosintload (PyPI)
- Feb 26, 2023
Malicious code in libvmpostmask (PyPI)
- Feb 26, 2023
Malicious code in tpednvidiakill (PyPI)
- Feb 26, 2023
Malicious code in libvmstrpull (PyPI)
- Feb 26, 2023
Malicious code in esqccpullpush (PyPI)
- Feb 26, 2023
Malicious code in tpinfovirtualre (PyPI)
- Feb 26, 2023
Malicious code in selfencodepostmc (PyPI)
- Feb 26, 2023
Malicious code in libstudytoolosint (PyPI)
- Feb 26, 2023
Malicious code in tppostedping (PyPI)
- Feb 26, 2023
Malicious code in tphackedrandhydra (PyPI)
- Feb 26, 2023
Malicious code in esqpinghackedvisa (PyPI)
- Feb 26, 2023
Malicious code in tpproofmcultra (PyPI)
- Feb 26, 2023
Malicious code in libreplacepywpip (PyPI)
- Feb 26, 2023
Malicious code in selfpeppongload (PyPI)
- Feb 26, 2023
Malicious code in py-intcandyintel (PyPI)
- Feb 26, 2023
Malicious code in esqencodepostinfo (PyPI)
- Feb 26, 2023
Malicious code in py-pullcvrand (PyPI)
- Feb 26, 2023
Malicious code in esqpaypalvirtualmc (PyPI)
- Feb 26, 2023
Malicious code in selfgamepullad (PyPI)
- Feb 26, 2023
Malicious code in tpcpupingreplace (PyPI)
- Feb 26, 2023
Malicious code in selfosintcraftlib (PyPI)
- Feb 26, 2023
Malicious code in py-maskmaskload (PyPI)
- Feb 26, 2023
Malicious code in py-killstudygame (PyPI)
- Feb 26, 2023
Malicious code in libvisagamepep (PyPI)
- Feb 26, 2023
Malicious code in libcvgetsplit (PyPI)
- Feb 26, 2023
Malicious code in tppyreplacestr (PyPI)
- Feb 26, 2023
Malicious code in selfvisacontrolcraft (PyPI)
- Feb 26, 2023
Malicious code in selfpyosinthacked (PyPI)
- Feb 26, 2023
Malicious code in selfpoststringvm (PyPI)
- Feb 26, 2023
Malicious code in selfkillguipaypal (PyPI)
- Feb 26, 2023
Malicious code in selfinfovisakill (PyPI)
- Feb 26, 2023
Malicious code in libmcpingstudy (PyPI)
- Feb 26, 2023
Malicious code in libhydrastrpy (PyPI)
- Feb 26, 2023
Malicious code in esqsuperosintpost (PyPI)
- Feb 26, 2023
Malicious code in esqstringtoolhacked (PyPI)
- Feb 26, 2023
Malicious code in selfproofloadram (PyPI)
- Feb 26, 2023
Malicious code in selfloadpywnvidia (PyPI)
- Feb 26, 2023
Malicious code in py-studymaskultra (PyPI)
- Feb 26, 2023
Malicious code in py-pulltoolurl (PyPI)
- Feb 26, 2023
Malicious code in py-paypalgetultra (PyPI)
- Feb 26, 2023
Malicious code in py-hydrapypush (PyPI)
- Feb 26, 2023
Malicious code in libpostcraftpush (PyPI)
- Feb 26, 2023
Malicious code in libkillproofpaypal (PyPI)
- Feb 26, 2023
Malicious code in libkillgamemc (PyPI)
- Feb 26, 2023
Malicious code in libinforeplacehacked (PyPI)
- Feb 26, 2023
Malicious code in libadcvcpu (PyPI)
- Feb 26, 2023
Malicious code in esqvisakilled (PyPI)
- Feb 26, 2023
Malicious code in esqguipostpost (PyPI)
Page 134 of 232