Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-craftreplaceproof (PyPI)
- Feb 25, 2023
Malicious code in libkillvmcraft (PyPI)
- Feb 25, 2023
Malicious code in libcvgrandpep (PyPI)
- Feb 25, 2023
Malicious code in tpguicpucc (PyPI)
- Feb 25, 2023
Malicious code in selfverstringping (PyPI)
- Feb 25, 2023
Malicious code in py-visaosintgame (PyPI)
- Feb 25, 2023
Malicious code in py-strmcintel (PyPI)
- Feb 25, 2023
Malicious code in py-revercontrol (PyPI)
- Feb 25, 2023
Malicious code in py-pushinfomine (PyPI)
- Feb 25, 2023
Malicious code in py-postvmosint (PyPI)
- Feb 25, 2023
Malicious code in esqstringposttool (PyPI)
- Feb 25, 2023
Malicious code in tpsupercandypong (PyPI)
- Feb 25, 2023
Malicious code in tprandomedsuper (PyPI)
- Feb 25, 2023
Malicious code in tpramultravm (PyPI)
- Feb 25, 2023
Malicious code in selfmineencodeproof (PyPI)
- Feb 25, 2023
Malicious code in selfhttpmasknvidia (PyPI)
- Feb 25, 2023
Malicious code in libhttpliburl (PyPI)
- Feb 25, 2023
Malicious code in libadpepre (PyPI)
- Feb 25, 2023
Malicious code in esqmccandypong (PyPI)
- Feb 25, 2023
Malicious code in esqedpyint (PyPI)
- Feb 25, 2023
Malicious code in tpvisainfointel (PyPI)
- Feb 25, 2023
Malicious code in tppostintsplit (PyPI)
- Feb 25, 2023
Malicious code in selfnvidiarelib (PyPI)
- Feb 25, 2023
Malicious code in selfcraftlibpong (PyPI)
- Feb 25, 2023
Malicious code in selfadlibproof (PyPI)
- Feb 25, 2023
Malicious code in py-vmadpong (PyPI)
- Feb 25, 2023
Malicious code in libramccload (PyPI)
- Feb 25, 2023
Malicious code in liblgtbhydrainfo (PyPI)
- Feb 25, 2023
Malicious code in esqreplacepywcc (PyPI)
- Feb 25, 2023
Malicious code in esqcontrolhttppaypal (PyPI)
- Feb 25, 2023
Malicious code in tppongproofvm (PyPI)
- Feb 25, 2023
Malicious code in tpkillrandpull (PyPI)
- Feb 25, 2023
Malicious code in selfgrandvisagui (PyPI)
- Feb 25, 2023
Malicious code in libpongstringrand (PyPI)
- Feb 25, 2023
Malicious code in liblibpiprandom (PyPI)
- Feb 25, 2023
Malicious code in libhttpintelstr (PyPI)
- Feb 25, 2023
Malicious code in libcandyrandget (PyPI)
- Feb 25, 2023
Malicious code in esqinfohackedvisa (PyPI)
- Feb 25, 2023
Malicious code in esqcvccre (PyPI)
- Feb 25, 2023
Malicious code in tppushhackedint (PyPI)
- Feb 25, 2023
Malicious code in liblibpywre (PyPI)
- Feb 25, 2023
Malicious code in libhydracandymask (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiaverpull (PyPI)
- Feb 25, 2023
Malicious code in esqinfopongping (PyPI)
- Feb 25, 2023
Malicious code in esqhackedcvpyw (PyPI)
- Feb 25, 2023
Malicious code in tploadloadstudy (PyPI)
- Feb 25, 2023
Malicious code in selftoolmctool (PyPI)
- Feb 25, 2023
Malicious code in selfsplitreplaceosint (PyPI)
- Feb 25, 2023
Malicious code in selfpyhydralgtb (PyPI)
- Feb 25, 2023
Malicious code in selflgtbosintreplace (PyPI)
Page 143 of 232