Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in esqmaskpepget (PyPI)
- Feb 26, 2023
Malicious code in tppushcpucandy (PyPI)
- Feb 26, 2023
Malicious code in selfvisaurlpong (PyPI)
- Feb 26, 2023
Malicious code in tpvervmsplit (PyPI)
- Feb 26, 2023
Malicious code in tpreplacecrafthacked (PyPI)
- Feb 26, 2023
Malicious code in tppywultraint (PyPI)
- Feb 26, 2023
Malicious code in tphydraloadsuper (PyPI)
- Feb 26, 2023
Malicious code in tpedintload (PyPI)
- Feb 26, 2023
Malicious code in selfosinturlre (PyPI)
- Feb 26, 2023
Malicious code in selfnvidiareplaceload (PyPI)
- Feb 26, 2023
Malicious code in py-ultramcpyw (PyPI)
- Feb 26, 2023
Malicious code in py-strcvkill (PyPI)
- Feb 26, 2023
Malicious code in py-pepmcpaypal (PyPI)
- Feb 26, 2023
Malicious code in libstudyguipip (PyPI)
- Feb 26, 2023
Malicious code in liblgtbpostpaypal (PyPI)
- Feb 26, 2023
Malicious code in libcandyreplacecandy (PyPI)
- Feb 26, 2023
Malicious code in esqpostrandomstring (PyPI)
- Feb 26, 2023
Malicious code in tppyosintrand (PyPI)
- Feb 26, 2023
Malicious code in selfmineencodestr (PyPI)
- Feb 26, 2023
Malicious code in selfcpuintgame (PyPI)
- Feb 26, 2023
Malicious code in py-guimaskram (PyPI)
- Feb 26, 2023
Malicious code in py-encodeproofreplace (PyPI)
- Feb 26, 2023
Malicious code in py-candycontrollgtb (PyPI)
- Feb 26, 2023
Malicious code in libpyminelib (PyPI)
- Feb 26, 2023
Malicious code in liblgtbgrandvm (PyPI)
- Feb 26, 2023
Malicious code in esqinfointproof (PyPI)
- Feb 26, 2023
Malicious code in tpsupermcmc (PyPI)
- Feb 26, 2023
Malicious code in tposintadget (PyPI)
- Feb 26, 2023
Malicious code in tpencodeinteled (PyPI)
- Feb 26, 2023
Malicious code in py-virtualencodevirtual (PyPI)
- Feb 26, 2023
Malicious code in py-splitreplacestring (PyPI)
- Feb 26, 2023
Malicious code in py-randmaskstudy (PyPI)
- Feb 26, 2023
Malicious code in py-ramrandgrand (PyPI)
- Feb 26, 2023
Malicious code in py-pullproofkill (PyPI)
- Feb 26, 2023
Malicious code in py-nvidiarandvirtual (PyPI)
- Feb 26, 2023
Malicious code in py-craftadcandy (PyPI)
- Feb 26, 2023
Malicious code in libvergethacked (PyPI)
- Feb 26, 2023
Malicious code in libultraultracc (PyPI)
- Feb 26, 2023
Malicious code in esqosintcandycc (PyPI)
- Feb 26, 2023
Malicious code in tpurlpaypalcraft (PyPI)
- Feb 26, 2023
Malicious code in tppiphttpstring (PyPI)
- Feb 26, 2023
Malicious code in tpmineloadtool (PyPI)
- Feb 26, 2023
Malicious code in selfvisaosintreplace (PyPI)
- Feb 26, 2023
Malicious code in selfguiloadget (PyPI)
- Feb 26, 2023
Malicious code in py-urlcandyosint (PyPI)
- Feb 26, 2023
Malicious code in py-pymcosint (PyPI)
- Feb 26, 2023
Malicious code in liburlsplitpush (PyPI)
- Feb 26, 2023
Malicious code in esqrevmgrand (PyPI)
- Feb 26, 2023
Malicious code in esqreplacegrandpyw (PyPI)
- Feb 26, 2023
Malicious code in tphackedcontroled (PyPI)
Page 137 of 232