Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libhydrasupercpu (PyPI)
- Feb 25, 2023
Malicious code in esqrepushvm (PyPI)
- Feb 25, 2023
Malicious code in esqkillloadload (PyPI)
- Feb 25, 2023
Malicious code in tpkillpywpost (PyPI)
- Feb 25, 2023
Malicious code in selframpipmc (PyPI)
- Feb 25, 2023
Malicious code in selfpywpipvirtual (PyPI)
- Feb 25, 2023
Malicious code in libpaypalurlstring (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpypost (PyPI)
- Feb 25, 2023
Malicious code in libgetvmed (PyPI)
- Feb 25, 2023
Malicious code in esqgetgetver (PyPI)
- Feb 25, 2023
Malicious code in tprandstudyget (PyPI)
- Feb 25, 2023
Malicious code in py-ponggrandnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-hackedultraget (PyPI)
- Feb 25, 2023
Malicious code in esqlibpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in tphydraencodevirtual (PyPI)
- Feb 25, 2023
Malicious code in selfhttpinfocv (PyPI)
- Feb 25, 2023
Malicious code in selfcpupongpush (PyPI)
- Feb 25, 2023
Malicious code in esqmasklgtbcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-pullreplaceinfo (PyPI)
- Feb 25, 2023
Malicious code in libverpipnvidia (PyPI)
- Feb 25, 2023
Malicious code in libvercvcpu (PyPI)
- Feb 25, 2023
Malicious code in libloadsuperpull (PyPI)
- Feb 25, 2023
Malicious code in esqpingstringram (PyPI)
- Feb 25, 2023
Malicious code in tpinfosplitinfo (PyPI)
- Feb 25, 2023
Malicious code in py-candyhttpad (PyPI)
- Feb 25, 2023
Malicious code in esqinfoinfoosint (PyPI)
- Feb 25, 2023
Malicious code in selfregamelgtb (PyPI)
- Feb 25, 2023
Malicious code in libintelurlurl (PyPI)
- Feb 25, 2023
Malicious code in tpinfostrpost (PyPI)
- Feb 25, 2023
Malicious code in selfstrvirtualrand (PyPI)
- Feb 25, 2023
Malicious code in librandhackedstudy (PyPI)
- Feb 25, 2023
Malicious code in tpminegrandencode (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolhttpcv (PyPI)
- Feb 25, 2023
Malicious code in selfintpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in py-verosintreplace (PyPI)
- Feb 25, 2023
Malicious code in py-encoderandompull (PyPI)
- Feb 25, 2023
Malicious code in tpreproofcandy (PyPI)
- Feb 25, 2023
Malicious code in libnvidiamcver (PyPI)
- Feb 25, 2023
Malicious code in tphackedgamehacked (PyPI)
- Feb 25, 2023
Malicious code in tpcandycontrolrand (PyPI)
- Feb 25, 2023
Malicious code in selfpywreplacecandy (PyPI)
- Feb 25, 2023
Malicious code in selfpostgrandgui (PyPI)
- Feb 25, 2023
Malicious code in selfpiplibultra (PyPI)
- Feb 25, 2023
Malicious code in py-infointelpost (PyPI)
- Feb 25, 2023
Malicious code in py-httpintelrandom (PyPI)
- Feb 25, 2023
Malicious code in libhttphydraget (PyPI)
- Feb 25, 2023
Malicious code in esqedstringver (PyPI)
- Feb 25, 2023
Malicious code in esqcontrolstudykill (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualstudyproof (PyPI)
- Feb 25, 2023
Malicious code in tpgetencodere (PyPI)
Page 144 of 232