Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,585 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-hackedultralgtb (PyPI)
- Feb 25, 2023
Malicious code in py-hackedmaskvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-adedgui (PyPI)
- Feb 25, 2023
Malicious code in libccvmcraft (PyPI)
- Feb 25, 2023
Malicious code in esqadcontrolcc (PyPI)
- Feb 25, 2023
Malicious code in tppyhydraurl (PyPI)
- Feb 25, 2023
Malicious code in tpcraftinfonvidia (PyPI)
- Feb 25, 2023
Malicious code in selfgrandpiposint (PyPI)
- Feb 25, 2023
Malicious code in selfcvurlload (PyPI)
- Feb 25, 2023
Malicious code in py-maskgrandultra (PyPI)
- Feb 25, 2023
Malicious code in libstudylibpy (PyPI)
- Feb 25, 2023
Malicious code in libcandystrmc (PyPI)
- Feb 25, 2023
Malicious code in esqsplitosintmask (PyPI)
- Feb 25, 2023
Malicious code in tplibvirtualstring (PyPI)
- Feb 25, 2023
Malicious code in tpinfokillpull (PyPI)
- Feb 25, 2023
Malicious code in tphackedreosint (PyPI)
- Feb 25, 2023
Malicious code in tpgamevisatool (PyPI)
- Feb 25, 2023
Malicious code in selfmcproofvisa (PyPI)
- Feb 25, 2023
Malicious code in selfguistudyosint (PyPI)
- Feb 25, 2023
Malicious code in libproofultrasplit (PyPI)
- Feb 25, 2023
Malicious code in libnvidiarecontrol (PyPI)
- Feb 25, 2023
Malicious code in libccurlcv (PyPI)
- Feb 25, 2023
Malicious code in esqpostpingkill (PyPI)
- Feb 25, 2023
Malicious code in esqintelreplacepull (PyPI)
- Feb 25, 2023
Malicious code in tpstringvmstring (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalmasktool (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalkillproof (PyPI)
- Feb 25, 2023
Malicious code in py-randompepvm (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiaverhacked (PyPI)
- Feb 25, 2023
Malicious code in py-infopiplgtb (PyPI)
- Feb 25, 2023
Malicious code in esqintrandhttp (PyPI)
- Feb 25, 2023
Malicious code in esqgrandsplitpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqcpucandyvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpreplacekillcpu (PyPI)
- Feb 25, 2023
Malicious code in tppiposintcc (PyPI)
- Feb 25, 2023
Malicious code in selfverintelurl (PyPI)
- Feb 25, 2023
Malicious code in selfloadccpy (PyPI)
- Feb 25, 2023
Malicious code in selfhttpstrver (PyPI)
- Feb 25, 2023
Malicious code in py-pullstrintel (PyPI)
- Feb 25, 2023
Malicious code in py-pongpongpong (PyPI)
- Feb 25, 2023
Malicious code in esqvmnvidiacraft (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualramget (PyPI)
- Feb 25, 2023
Malicious code in tppippinginfo (PyPI)
- Feb 25, 2023
Malicious code in selfstrloadnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfkillhydraping (PyPI)
- Feb 25, 2023
Malicious code in py-ccguigrand (PyPI)
- Feb 25, 2023
Malicious code in libpongproofload (PyPI)
- Feb 25, 2023
Malicious code in esqtoolintelpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqreplacepaypalstr (PyPI)
- Feb 25, 2023
Malicious code in esqpushmcstring (PyPI)
Page 150 of 232