Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,585 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqvisavmload (PyPI)
- Feb 25, 2023
Malicious code in py-libcccandy (PyPI)
- Feb 25, 2023
Malicious code in esqcandyreplacereplace (PyPI)
- Feb 25, 2023
Malicious code in selfcpulgtbpip (PyPI)
- Feb 25, 2023
Malicious code in py-pycpuload (PyPI)
- Feb 25, 2023
Malicious code in libhttplgtbtool (PyPI)
- Feb 25, 2023
Malicious code in liblibpingad (PyPI)
- Feb 25, 2023
Malicious code in libadcvpip (PyPI)
- Feb 25, 2023
Malicious code in tpgetgetmc (PyPI)
- Feb 25, 2023
Malicious code in py-cpucvpost (PyPI)
- Feb 25, 2023
Malicious code in liblibhttpinfo (PyPI)
- Feb 25, 2023
Malicious code in tpvisahydracpu (PyPI)
- Feb 25, 2023
Malicious code in tpstrpycv (PyPI)
- Feb 25, 2023
Malicious code in selfultranvidiapull (PyPI)
- Feb 25, 2023
Malicious code in selfsplitcpuload (PyPI)
- Feb 25, 2023
Malicious code in selfpullvisaed (PyPI)
- Feb 25, 2023
Malicious code in selfloadpushtool (PyPI)
- Feb 25, 2023
Malicious code in py-guistrcraft (PyPI)
- Feb 25, 2023
Malicious code in librandomguipip (PyPI)
- Feb 25, 2023
Malicious code in libmcrandompep (PyPI)
- Feb 25, 2023
Malicious code in esqvmpongstring (PyPI)
- Feb 25, 2023
Malicious code in esqvirtuallibgrand (PyPI)
- Feb 25, 2023
Malicious code in esqguipywhttp (PyPI)
- Feb 25, 2023
Malicious code in tpmcstrinfo (PyPI)
- Feb 25, 2023
Malicious code in py-vmlibstudy (PyPI)
- Feb 25, 2023
Malicious code in py-mcmcmask (PyPI)
- Feb 25, 2023
Malicious code in py-craftguire (PyPI)
- Feb 25, 2023
Malicious code in py-candyhttpvirtual (PyPI)
- Feb 25, 2023
Malicious code in liburlcandylgtb (PyPI)
- Feb 25, 2023
Malicious code in libstudyencodere (PyPI)
- Feb 25, 2023
Malicious code in libpipccstudy (PyPI)
- Feb 25, 2023
Malicious code in esqhttpmaskpush (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualcontrolpong (PyPI)
- Feb 25, 2023
Malicious code in tprandomsuperpull (PyPI)
- Feb 25, 2023
Malicious code in tppullosintcv (PyPI)
- Feb 25, 2023
Malicious code in tpencodepepmine (PyPI)
- Feb 25, 2023
Malicious code in selfcpupongkill (PyPI)
- Feb 25, 2023
Malicious code in py-cpumcpyw (PyPI)
- Feb 25, 2023
Malicious code in libpepproofstring (PyPI)
- Feb 25, 2023
Malicious code in libpepcontrolultra (PyPI)
- Feb 25, 2023
Malicious code in libminevisarand (PyPI)
- Feb 25, 2023
Malicious code in liblibcvsuper (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpostinfo (PyPI)
- Feb 25, 2023
Malicious code in libcvminecandy (PyPI)
- Feb 25, 2023
Malicious code in esqstudytoollgtb (PyPI)
- Feb 25, 2023
Malicious code in esqstrpushmc (PyPI)
- Feb 25, 2023
Malicious code in tpguicvintel (PyPI)
- Feb 25, 2023
Malicious code in selfpiplibver (PyPI)
- Feb 25, 2023
Malicious code in py-paypalsplitpush (PyPI)
- Feb 25, 2023
Malicious code in py-httpreplacerand (PyPI)
Page 147 of 232