Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,585 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqpostosintpush (PyPI)
- Feb 25, 2023
Malicious code in esqlgtbpostpip (PyPI)
- Feb 25, 2023
Malicious code in tpgetultrapush (PyPI)
- Feb 25, 2023
Malicious code in selfguivisareplace (PyPI)
- Feb 25, 2023
Malicious code in py-gameedcc (PyPI)
- Feb 25, 2023
Malicious code in libverinteltool (PyPI)
- Feb 25, 2023
Malicious code in libpushultrapull (PyPI)
- Feb 25, 2023
Malicious code in libpushrandcv (PyPI)
- Feb 25, 2023
Malicious code in esqsplitultrasuper (PyPI)
- Feb 25, 2023
Malicious code in esqpullcraftpull (PyPI)
- Feb 25, 2023
Malicious code in tpproofpongint (PyPI)
- Feb 25, 2023
Malicious code in selfsplittoolgrand (PyPI)
- Feb 25, 2023
Malicious code in selfpushmcsplit (PyPI)
- Feb 25, 2023
Malicious code in selfproofsplitpush (PyPI)
- Feb 25, 2023
Malicious code in py-pinggrandping (PyPI)
- Feb 25, 2023
Malicious code in py-peprandstudy (PyPI)
- Feb 25, 2023
Malicious code in py-intelpepsuper (PyPI)
- Feb 25, 2023
Malicious code in esqvirtualproofstring (PyPI)
- Feb 25, 2023
Malicious code in tpverloadtool (PyPI)
- Feb 25, 2023
Malicious code in tppushstudylgtb (PyPI)
- Feb 25, 2023
Malicious code in tppostrandomosint (PyPI)
- Feb 25, 2023
Malicious code in tphydrareplacetool (PyPI)
- Feb 25, 2023
Malicious code in selfpushurlosint (PyPI)
- Feb 25, 2023
Malicious code in selfpipstudyhacked (PyPI)
- Feb 25, 2023
Malicious code in selfhackedccpull (PyPI)
- Feb 25, 2023
Malicious code in py-httpstringvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpencodererandom (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolloadget (PyPI)
- Feb 25, 2023
Malicious code in selfmaskcandyrandom (PyPI)
- Feb 25, 2023
Malicious code in py-vmrandomsuper (PyPI)
- Feb 25, 2023
Malicious code in py-randomkillpull (PyPI)
- Feb 25, 2023
Malicious code in libencoderandomcpu (PyPI)
- Feb 25, 2023
Malicious code in libcraftguipost (PyPI)
- Feb 25, 2023
Malicious code in esqstringlgtbpost (PyPI)
- Feb 25, 2023
Malicious code in py-pongcpureplace (PyPI)
- Feb 25, 2023
Malicious code in libtooladvirtual (PyPI)
- Feb 25, 2023
Malicious code in libstringhackedhacked (PyPI)
- Feb 25, 2023
Malicious code in liblibintgame (PyPI)
- Feb 25, 2023
Malicious code in esqgamestringurl (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiapipint (PyPI)
- Feb 25, 2023
Malicious code in esqmcpepgrand (PyPI)
- Feb 25, 2023
Malicious code in tpvercpuencode (PyPI)
- Feb 25, 2023
Malicious code in selfurlpypip (PyPI)
- Feb 25, 2023
Malicious code in selflgtbretool (PyPI)
- Feb 25, 2023
Malicious code in libstrreget (PyPI)
- Feb 25, 2023
Malicious code in libsplitgameload (PyPI)
- Feb 25, 2023
Malicious code in esqccstringlgtb (PyPI)
- Feb 25, 2023
Malicious code in tprepywsuper (PyPI)
- Feb 25, 2023
Malicious code in libpywramgrand (PyPI)
- Feb 25, 2023
Malicious code in libcpusuperpong (PyPI)
Page 151 of 232