Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in py-ccmcstudy (PyPI)
- Feb 26, 2023
Malicious code in esqpymcpy (PyPI)
- Feb 26, 2023
Malicious code in esqadgameultra (PyPI)
- Feb 26, 2023
Malicious code in selfededpy (PyPI)
- Feb 26, 2023
Malicious code in py-hackedhttpstring (PyPI)
- Feb 26, 2023
Malicious code in librandomcvpyw (PyPI)
- Feb 26, 2023
Malicious code in libguivisastring (PyPI)
- Feb 26, 2023
Malicious code in libadtoolrandom (PyPI)
- Feb 26, 2023
Malicious code in esqvergamepy (PyPI)
- Feb 26, 2023
Malicious code in tpencodereplacepush (PyPI)
- Feb 26, 2023
Malicious code in libedramlgtb (PyPI)
- Feb 26, 2023
Malicious code in esqverpostcontrol (PyPI)
- Feb 26, 2023
Malicious code in esqminepymc (PyPI)
- Feb 26, 2023
Malicious code in selfvisareplacemc (PyPI)
- Feb 26, 2023
Malicious code in selfgrandgametool (PyPI)
- Feb 26, 2023
Malicious code in py-superrandompaypal (PyPI)
- Feb 26, 2023
Malicious code in py-intelproofcandy (PyPI)
- Feb 26, 2023
Malicious code in selfgrandccintel (PyPI)
- Feb 26, 2023
Malicious code in py-mcminegame (PyPI)
- Feb 26, 2023
Malicious code in libcraftsplithacked (PyPI)
- Feb 26, 2023
Malicious code in tptoolcpusplit (PyPI)
- Feb 26, 2023
Malicious code in tphackedhttpultra (PyPI)
- Feb 26, 2023
Malicious code in py-toolreplacelib (PyPI)
- Feb 26, 2023
Malicious code in py-ramgameping (PyPI)
- Feb 26, 2023
Malicious code in libvirtuallgtbcontrol (PyPI)
- Feb 26, 2023
Malicious code in tprandomultravisa (PyPI)
- Feb 26, 2023
Malicious code in selfgamepushstr (PyPI)
- Feb 26, 2023
Malicious code in py-adrandomintel (PyPI)
- Feb 26, 2023
Malicious code in selfpullsplitcraft (PyPI)
- Feb 26, 2023
Malicious code in libtoolloadsplit (PyPI)
- Feb 26, 2023
Malicious code in py-randomgamemine (PyPI)
- Feb 26, 2023
Malicious code in esqstudyinttool (PyPI)
- Feb 26, 2023
Malicious code in tpstrgethydra (PyPI)
- Feb 26, 2023
Malicious code in esqmaskcontrolgrand (PyPI)
- Feb 26, 2023
Malicious code in selfcandykillurl (PyPI)
- Feb 26, 2023
Malicious code in py-cpunvidiacraft (PyPI)
- Feb 26, 2023
Malicious code in libpywpywcc (PyPI)
- Feb 26, 2023
Malicious code in selfpushlgtbnvidia (PyPI)
- Feb 26, 2023
Malicious code in py-intelinfohacked (PyPI)
- Feb 26, 2023
Malicious code in libhttphttpcandy (PyPI)
- Feb 26, 2023
Malicious code in tpreccmine (PyPI)
- Feb 26, 2023
Malicious code in tppypiplgtb (PyPI)
- Feb 26, 2023
Malicious code in tpkillosintcontrol (PyPI)
- Feb 26, 2023
Malicious code in py-grandsuperencode (PyPI)
- Feb 26, 2023
Malicious code in selfpaypalpushgame (PyPI)
- Feb 26, 2023
Malicious code in selfcckillad (PyPI)
- Feb 26, 2023
Malicious code in py-hackedgrandproof (PyPI)
- Feb 26, 2023
Malicious code in libguipushreplace (PyPI)
- Feb 26, 2023
Malicious code in tpvirtualcontrolcraft (PyPI)
- Feb 26, 2023
Malicious code in tphackedhydraproof (PyPI)
Page 139 of 232