Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in tpcpuedosint (PyPI)
- Feb 26, 2023
Malicious code in tpcandycontrolpush (PyPI)
- Feb 26, 2023
Malicious code in selfstudynvidiapep (PyPI)
- Feb 26, 2023
Malicious code in selfcvcvmask (PyPI)
- Feb 26, 2023
Malicious code in selfccpullint (PyPI)
- Feb 26, 2023
Malicious code in py-killhackedpep (PyPI)
- Feb 26, 2023
Malicious code in esqultrareplacecandy (PyPI)
- Feb 26, 2023
Malicious code in esqstudypongcandy (PyPI)
- Feb 26, 2023
Malicious code in esqpaypalgamemc (PyPI)
- Feb 26, 2023
Malicious code in esqgrandminetool (PyPI)
- Feb 26, 2023
Malicious code in tppaypalrandomurl (PyPI)
- Feb 26, 2023
Malicious code in tploadloadosint (PyPI)
- Feb 26, 2023
Malicious code in py-libhydraed (PyPI)
- Feb 26, 2023
Malicious code in libvirtualpostcc (PyPI)
- Feb 26, 2023
Malicious code in liblibsuperad (PyPI)
- Feb 26, 2023
Malicious code in libcraftloadurl (PyPI)
- Feb 26, 2023
Malicious code in esqvisaurlstring (PyPI)
- Feb 26, 2023
Malicious code in esqvisamaskpyw (PyPI)
- Feb 26, 2023
Malicious code in tpnvidiarandsplit (PyPI)
- Feb 26, 2023
Malicious code in tpencodecandyosint (PyPI)
- Feb 26, 2023
Malicious code in selfintelsplitlgtb (PyPI)
- Feb 26, 2023
Malicious code in py-splitvercraft (PyPI)
- Feb 26, 2023
Malicious code in esqverccpush (PyPI)
- Feb 26, 2023
Malicious code in esqinfohttppush (PyPI)
- Feb 26, 2023
Malicious code in tplibhydrahacked (PyPI)
- Feb 26, 2023
Malicious code in selfvirtualinfoencode (PyPI)
- Feb 26, 2023
Malicious code in selfcraftcontrolload (PyPI)
- Feb 26, 2023
Malicious code in py-pullposted (PyPI)
- Feb 26, 2023
Malicious code in libmcrever (PyPI)
- Feb 26, 2023
Malicious code in esqproofurlstudy (PyPI)
- Feb 26, 2023
Malicious code in selfcvinfourl (PyPI)
- Feb 26, 2023
Malicious code in py-lgtbgetgrand (PyPI)
- Feb 26, 2023
Malicious code in py-grandultralgtb (PyPI)
- Feb 26, 2023
Malicious code in libloadhackedpep (PyPI)
- Feb 26, 2023
Malicious code in esqcraftvisaproof (PyPI)
- Feb 26, 2023
Malicious code in esqcraftguimine (PyPI)
- Feb 26, 2023
Malicious code in selfvmcraftpush (PyPI)
- Feb 26, 2023
Malicious code in py-strpushad (PyPI)
- Feb 26, 2023
Malicious code in py-replacepushrand (PyPI)
- Feb 26, 2023
Malicious code in esqosintminehydra (PyPI)
- Feb 26, 2023
Malicious code in esqinfoloadnvidia (PyPI)
- Feb 26, 2023
Malicious code in esqgrandcandyproof (PyPI)
- Feb 26, 2023
Malicious code in esqccreplaceintel (PyPI)
- Feb 26, 2023
Malicious code in tpcandyloadvisa (PyPI)
- Feb 26, 2023
Malicious code in selfrecandyping (PyPI)
- Feb 26, 2023
Malicious code in selfpypeppush (PyPI)
- Feb 26, 2023
Malicious code in selfinfolgtbhydra (PyPI)
- Feb 26, 2023
Malicious code in py-nvidiahttppep (PyPI)
- Feb 26, 2023
Malicious code in py-cvstrpyw (PyPI)
- Feb 26, 2023
Malicious code in selfpeppullram (PyPI)
Page 138 of 232