Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in libpinghttphttp (PyPI)
- Feb 26, 2023
Malicious code in libcontroltoolver (PyPI)
- Feb 26, 2023
Malicious code in esqgamerandpull (PyPI)
- Feb 26, 2023
Malicious code in esqgameloadgui (PyPI)
- Feb 26, 2023
Malicious code in selfpepstudylib (PyPI)
- Feb 26, 2023
Malicious code in py-pingstringpaypal (PyPI)
- Feb 26, 2023
Malicious code in py-mcosintmc (PyPI)
- Feb 26, 2023
Malicious code in py-infomcpy (PyPI)
- Feb 26, 2023
Malicious code in libosintnvidiapull (PyPI)
- Feb 26, 2023
Malicious code in esqhydraedcc (PyPI)
- Feb 26, 2023
Malicious code in tpvisaguipost (PyPI)
- Feb 26, 2023
Malicious code in tposintcraftram (PyPI)
- Feb 26, 2023
Malicious code in py-vmcvram (PyPI)
- Feb 26, 2023
Malicious code in py-urlhydrakill (PyPI)
- Feb 26, 2023
Malicious code in libsuperkilllib (PyPI)
- Feb 26, 2023
Malicious code in esqgetcontrolpost (PyPI)
- Feb 26, 2023
Malicious code in tppywintelgame (PyPI)
- Feb 26, 2023
Malicious code in selfmcpipcpu (PyPI)
- Feb 26, 2023
Malicious code in libvisaintinfo (PyPI)
- Feb 26, 2023
Malicious code in libcvcontrolhydra (PyPI)
- Feb 26, 2023
Malicious code in esqvirtualedhacked (PyPI)
- Feb 26, 2023
Malicious code in esqcpuguilgtb (PyPI)
- Feb 26, 2023
Malicious code in tpguicontrolcv (PyPI)
- Feb 26, 2023
Malicious code in py-paypalsplitsplit (PyPI)
- Feb 26, 2023
Malicious code in esqedencodeurl (PyPI)
- Feb 26, 2023
Malicious code in tppywproofcpu (PyPI)
- Feb 26, 2023
Malicious code in selfultrapingpush (PyPI)
- Feb 26, 2023
Malicious code in selfgamecvultra (PyPI)
- Feb 26, 2023
Malicious code in py-killtoolad (PyPI)
- Feb 26, 2023
Malicious code in py-ccstringpost (PyPI)
- Feb 26, 2023
Malicious code in esqencodepaypalpong (PyPI)
- Feb 26, 2023
Malicious code in selflgtbstringload (PyPI)
- Feb 26, 2023
Malicious code in py-replacepushinfo (PyPI)
- Feb 26, 2023
Malicious code in libcraftcandyrandom (PyPI)
- Feb 26, 2023
Malicious code in esqmaskcpuhacked (PyPI)
- Feb 26, 2023
Malicious code in selfpywpaypalultra (PyPI)
- Feb 26, 2023
Malicious code in selfloadedpy (PyPI)
- Feb 26, 2023
Malicious code in libcontrolinfostr (PyPI)
- Feb 26, 2023
Malicious code in esqosintvisaget (PyPI)
- Feb 26, 2023
Malicious code in tprandguilib (PyPI)
- Feb 26, 2023
Malicious code in tploadreplacestring (PyPI)
- Feb 26, 2023
Malicious code in tpcrafthydracandy (PyPI)
- Feb 26, 2023
Malicious code in selfhttpsplited (PyPI)
- Feb 26, 2023
Malicious code in libcontrolguipyw (PyPI)
- Feb 26, 2023
Malicious code in esqstringtoolint (PyPI)
- Feb 26, 2023
Malicious code in esqsplitpeptool (PyPI)
- Feb 26, 2023
Malicious code in tprampingload (PyPI)
- Feb 26, 2023
Malicious code in py-proofccmask (PyPI)
- Feb 26, 2023
Malicious code in libpeplgtbinfo (PyPI)
- Feb 26, 2023
Malicious code in selfmineultraram (PyPI)
Page 136 of 232