Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tpadmask (PyPI)
- Feb 25, 2023
Malicious code in selfpywsplitsuper (PyPI)
- Feb 25, 2023
Malicious code in selfpypull (PyPI)
- Feb 25, 2023
Malicious code in selfhackedintload (PyPI)
- Feb 25, 2023
Malicious code in selfguilibstring (PyPI)
- Feb 25, 2023
Malicious code in libpaypalosintvisa (PyPI)
- Feb 25, 2023
Malicious code in libadosint (PyPI)
- Feb 25, 2023
Malicious code in esqvmpyw (PyPI)
- Feb 25, 2023
Malicious code in selfvmcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfrandlgtb (PyPI)
- Feb 25, 2023
Malicious code in selfgamestring (PyPI)
- Feb 25, 2023
Malicious code in py-inforandom (PyPI)
- Feb 25, 2023
Malicious code in libvirtualpushpy (PyPI)
- Feb 25, 2023
Malicious code in librandomstudy (PyPI)
- Feb 25, 2023
Malicious code in libloadpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in esqreplacerandom (PyPI)
- Feb 25, 2023
Malicious code in esqrehydraencode (PyPI)
- Feb 25, 2023
Malicious code in selfremask (PyPI)
- Feb 25, 2023
Malicious code in selfpongnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-candyreplace (PyPI)
- Feb 25, 2023
Malicious code in libcraftcontrolcraft (PyPI)
- Feb 25, 2023
Malicious code in esqramreplacestudy (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalinfogui (PyPI)
- Feb 25, 2023
Malicious code in esqosintpushcpu (PyPI)
- Feb 25, 2023
Malicious code in tppushgrandcraft (PyPI)
- Feb 25, 2023
Malicious code in tpmcrandpyw (PyPI)
- Feb 25, 2023
Malicious code in selfhydrastringpip (PyPI)
- Feb 25, 2023
Malicious code in py-studykill (PyPI)
- Feb 25, 2023
Malicious code in py-intpep (PyPI)
- Feb 25, 2023
Malicious code in libtoolram (PyPI)
- Feb 25, 2023
Malicious code in libpostpushping (PyPI)
- Feb 25, 2023
Malicious code in libintint (PyPI)
- Feb 25, 2023
Malicious code in libedpephttp (PyPI)
- Feb 25, 2023
Malicious code in esqmcgame (PyPI)
- Feb 25, 2023
Malicious code in tppipstrstr (PyPI)
- Feb 25, 2023
Malicious code in tplgtbmcultra (PyPI)
- Feb 25, 2023
Malicious code in tpgetpongre (PyPI)
- Feb 25, 2023
Malicious code in liburlpongpost (PyPI)
- Feb 25, 2023
Malicious code in esqrepyw (PyPI)
- Feb 25, 2023
Malicious code in tpedpyw (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolpipint (PyPI)
- Feb 25, 2023
Malicious code in tpccloadget (PyPI)
- Feb 25, 2023
Malicious code in selfccsupervm (PyPI)
- Feb 25, 2023
Malicious code in py-toolproofpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-hydragrandgame (PyPI)
- Feb 25, 2023
Malicious code in libvergameurl (PyPI)
- Feb 25, 2023
Malicious code in libreplacevm (PyPI)
- Feb 25, 2023
Malicious code in libpongproof (PyPI)
- Feb 25, 2023
Malicious code in tpsupergame (PyPI)
- Feb 25, 2023
Malicious code in selfstrtool (PyPI)
Page 156 of 232