Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,593 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfultrapaypalencode (PyPI)
- Feb 25, 2023
Malicious code in selfultranvidiapip (PyPI)
- Feb 25, 2023
Malicious code in selfnvidiaurlload (PyPI)
- Feb 25, 2023
Malicious code in py-toolpipproof (PyPI)
- Feb 25, 2023
Malicious code in py-edrandomre (PyPI)
- Feb 25, 2023
Malicious code in libosintsplitmc (PyPI)
- Feb 25, 2023
Malicious code in libgetpystring (PyPI)
- Feb 25, 2023
Malicious code in libcontrolultrastudy (PyPI)
- Feb 25, 2023
Malicious code in esqvmnvidiacc (PyPI)
- Feb 25, 2023
Malicious code in tpposthttpvisa (PyPI)
- Feb 25, 2023
Malicious code in tppongedintel (PyPI)
- Feb 25, 2023
Malicious code in tppiphackedad (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiainfopong (PyPI)
- Feb 25, 2023
Malicious code in py-visaurlre (PyPI)
- Feb 25, 2023
Malicious code in py-reurlhacked (PyPI)
- Feb 25, 2023
Malicious code in py-loadpongsplit (PyPI)
- Feb 25, 2023
Malicious code in libvmstrtool (PyPI)
- Feb 25, 2023
Malicious code in libencodevmping (PyPI)
- Feb 25, 2023
Malicious code in esqpongpysuper (PyPI)
- Feb 25, 2023
Malicious code in esqgetpippong (PyPI)
- Feb 25, 2023
Malicious code in esqcvstringvisa (PyPI)
- Feb 25, 2023
Malicious code in esqadvisasplit (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualpulltool (PyPI)
- Feb 25, 2023
Malicious code in tpstrintnvidia (PyPI)
- Feb 25, 2023
Malicious code in tphttpcchttp (PyPI)
- Feb 25, 2023
Malicious code in selfultrapipram (PyPI)
- Feb 25, 2023
Malicious code in selftoolhttppaypal (PyPI)
- Feb 25, 2023
Malicious code in selfosintstudyrandom (PyPI)
- Feb 25, 2023
Malicious code in py-randomintelver (PyPI)
- Feb 25, 2023
Malicious code in py-pylibmine (PyPI)
- Feb 25, 2023
Malicious code in libcvstred (PyPI)
- Feb 25, 2023
Malicious code in esqurledad (PyPI)
- Feb 25, 2023
Malicious code in tphackedvirtualad (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolpullmine (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualvermine (PyPI)
- Feb 25, 2023
Malicious code in py-intelosintosint (PyPI)
- Feb 25, 2023
Malicious code in libccgetsuper (PyPI)
- Feb 25, 2023
Malicious code in tpreplaceloadpong (PyPI)
- Feb 25, 2023
Malicious code in tppongultrapush (PyPI)
- Feb 25, 2023
Malicious code in selfccedpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-cvstringed (PyPI)
- Feb 25, 2023
Malicious code in libpipultraproof (PyPI)
- Feb 25, 2023
Malicious code in libcontrolinfomine (PyPI)
- Feb 25, 2023
Malicious code in esqvmguigui (PyPI)
- Feb 25, 2023
Malicious code in esqpushccre (PyPI)
- Feb 25, 2023
Malicious code in esqpingadcandy (PyPI)
- Feb 25, 2023
Malicious code in esqcpurandomver (PyPI)
- Feb 25, 2023
Malicious code in tpsplitpystudy (PyPI)
- Feb 25, 2023
Malicious code in selfgetreplacepong (PyPI)
- Feb 25, 2023
Malicious code in py-replaceverreplace (PyPI)
Page 145 of 232