Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,585 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-paypalloadver (PyPI)
- Feb 25, 2023
Malicious code in py-httpaded (PyPI)
- Feb 25, 2023
Malicious code in libvmpushrandom (PyPI)
- Feb 25, 2023
Malicious code in librandgrandpip (PyPI)
- Feb 25, 2023
Malicious code in esqvisacpucraft (PyPI)
- Feb 25, 2023
Malicious code in esqultragrandgame (PyPI)
- Feb 25, 2023
Malicious code in esqosintpullproof (PyPI)
- Feb 25, 2023
Malicious code in esqccpostmask (PyPI)
- Feb 25, 2023
Malicious code in tppyliblgtb (PyPI)
- Feb 25, 2023
Malicious code in tplgtbencodecraft (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualpippong (PyPI)
- Feb 25, 2023
Malicious code in selfpullstringver (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalpywgame (PyPI)
- Feb 25, 2023
Malicious code in py-libpushram (PyPI)
- Feb 25, 2023
Malicious code in liblgtbproofpy (PyPI)
- Feb 25, 2023
Malicious code in selfosintstudyhttp (PyPI)
- Feb 25, 2023
Malicious code in py-pongvmstring (PyPI)
- Feb 25, 2023
Malicious code in libramreplacelgtb (PyPI)
- Feb 25, 2023
Malicious code in esqpywpoststudy (PyPI)
- Feb 25, 2023
Malicious code in esqpipgetgrand (PyPI)
- Feb 25, 2023
Malicious code in tpinfotoolcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalpepcc (PyPI)
- Feb 25, 2023
Malicious code in selfosintadsplit (PyPI)
- Feb 25, 2023
Malicious code in libpaypalcpugrand (PyPI)
- Feb 25, 2023
Malicious code in esqstudyponghacked (PyPI)
- Feb 25, 2023
Malicious code in tpverpygame (PyPI)
- Feb 25, 2023
Malicious code in selfstudyrecontrol (PyPI)
- Feb 25, 2023
Malicious code in selfhydranvidiamc (PyPI)
- Feb 25, 2023
Malicious code in libcraftosintnvidia (PyPI)
- Feb 25, 2023
Malicious code in esqhttpvirtualvm (PyPI)
- Feb 25, 2023
Malicious code in tpvmpostsuper (PyPI)
- Feb 25, 2023
Malicious code in selfpullsplitcv (PyPI)
- Feb 25, 2023
Malicious code in libencodepywkill (PyPI)
- Feb 25, 2023
Malicious code in esqminehackedcv (PyPI)
- Feb 25, 2023
Malicious code in tpintvisahacked (PyPI)
- Feb 25, 2023
Malicious code in py-studypongvisa (PyPI)
- Feb 25, 2023
Malicious code in py-pulladpy (PyPI)
- Feb 25, 2023
Malicious code in libnvidiaintmine (PyPI)
- Feb 25, 2023
Malicious code in esqresplitproof (PyPI)
- Feb 25, 2023
Malicious code in tpvmhydragrand (PyPI)
- Feb 25, 2023
Malicious code in selfrecvstudy (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalpyrandom (PyPI)
- Feb 25, 2023
Malicious code in libsuperkilltool (PyPI)
- Feb 25, 2023
Malicious code in tppipproofstudy (PyPI)
- Feb 25, 2023
Malicious code in selfgetvirtualpull (PyPI)
- Feb 25, 2023
Malicious code in selfgamestringpush (PyPI)
- Feb 25, 2023
Malicious code in py-getosintpyw (PyPI)
- Feb 25, 2023
Malicious code in tpkillcpumine (PyPI)
- Feb 25, 2023
Malicious code in selfvisapullcv (PyPI)
- Feb 25, 2023
Malicious code in py-stringvisaosint (PyPI)
Page 146 of 232