Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in esqencodecvpush (PyPI)
- Feb 26, 2023
Malicious code in tppingsplitcc (PyPI)
- Feb 26, 2023
Malicious code in selfcraftvmultra (PyPI)
- Feb 26, 2023
Malicious code in py-controlpingpong (PyPI)
- Feb 26, 2023
Malicious code in libosintcvkill (PyPI)
- Feb 26, 2023
Malicious code in esqverlibosint (PyPI)
- Feb 26, 2023
Malicious code in esqultravirtualstring (PyPI)
- Feb 26, 2023
Malicious code in esqpyhydrarandom (PyPI)
- Feb 26, 2023
Malicious code in esqgrandpyinfo (PyPI)
- Feb 26, 2023
Malicious code in esqcraftverhacked (PyPI)
- Feb 26, 2023
Malicious code in tpvmencodecv (PyPI)
- Feb 26, 2023
Malicious code in tprampipre (PyPI)
- Feb 26, 2023
Malicious code in tpramhydracpu (PyPI)
- Feb 26, 2023
Malicious code in tpponglgtbre (PyPI)
- Feb 26, 2023
Malicious code in selfpullstringpong (PyPI)
- Feb 26, 2023
Malicious code in py-studytoolvisa (PyPI)
- Feb 26, 2023
Malicious code in py-lgtbpipram (PyPI)
- Feb 26, 2023
Malicious code in esqmcreplacestr (PyPI)
- Feb 26, 2023
Malicious code in esqhackedrandomcc (PyPI)
- Feb 26, 2023
Malicious code in tpsplitlibpaypal (PyPI)
- Feb 26, 2023
Malicious code in tpcandyreed (PyPI)
- Feb 26, 2023
Malicious code in selftoolvirtualpep (PyPI)
- Feb 26, 2023
Malicious code in selfrandompostinfo (PyPI)
- Feb 26, 2023
Malicious code in selfgetultrapong (PyPI)
- Feb 26, 2023
Malicious code in py-minepipram (PyPI)
- Feb 26, 2023
Malicious code in libreencodead (PyPI)
- Feb 26, 2023
Malicious code in esqstrpushsplit (PyPI)
- Feb 26, 2023
Malicious code in esqpywrandomstr (PyPI)
- Feb 26, 2023
Malicious code in esqpullcontrolint (PyPI)
- Feb 26, 2023
Malicious code in tppylgtbreplace (PyPI)
- Feb 26, 2023
Malicious code in tpgetpipcv (PyPI)
- Feb 26, 2023
Malicious code in selfrandomcandypy (PyPI)
- Feb 26, 2023
Malicious code in selfencodenvidiaurl (PyPI)
- Feb 26, 2023
Malicious code in py-visavirtualre (PyPI)
- Feb 26, 2023
Malicious code in py-pingcvvm (PyPI)
- Feb 26, 2023
Malicious code in py-hydracontrolcontrol (PyPI)
- Feb 26, 2023
Malicious code in libsplitguipull (PyPI)
- Feb 26, 2023
Malicious code in liblibpongvisa (PyPI)
- Feb 26, 2023
Malicious code in esqinfohackednvidia (PyPI)
- Feb 26, 2023
Malicious code in tppiprandhydra (PyPI)
- Feb 26, 2023
Malicious code in selfrandreplacerand (PyPI)
- Feb 26, 2023
Malicious code in selfpullstringtool (PyPI)
- Feb 26, 2023
Malicious code in py-stredencode (PyPI)
- Feb 26, 2023
Malicious code in py-edpipcc (PyPI)
- Feb 26, 2023
Malicious code in py-craftnvidiamask (PyPI)
- Feb 26, 2023
Malicious code in esqproofpushlib (PyPI)
- Feb 26, 2023
Malicious code in tpultrapullrand (PyPI)
- Feb 26, 2023
Malicious code in tpcontrolkillrandom (PyPI)
- Feb 26, 2023
Malicious code in selfsplitrandompyw (PyPI)
- Feb 26, 2023
Malicious code in py-encodehackeded (PyPI)
Page 135 of 232