Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libsplitpush (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpullsuper (PyPI)
- Feb 25, 2023
Malicious code in libencodeping (PyPI)
- Feb 25, 2023
Malicious code in libcvcv (PyPI)
- Feb 25, 2023
Malicious code in esqpongcontrolkill (PyPI)
- Feb 25, 2023
Malicious code in esqmaskpostgame (PyPI)
- Feb 25, 2023
Malicious code in tppushstring (PyPI)
- Feb 25, 2023
Malicious code in tplibinfo (PyPI)
- Feb 25, 2023
Malicious code in selfgrandhackedver (PyPI)
- Feb 25, 2023
Malicious code in selfgetmaskpong (PyPI)
- Feb 25, 2023
Malicious code in py-reosint (PyPI)
- Feb 25, 2023
Malicious code in libpushcv (PyPI)
- Feb 25, 2023
Malicious code in tpstrsplit (PyPI)
- Feb 25, 2023
Malicious code in tpcvpipgui (PyPI)
- Feb 25, 2023
Malicious code in selfencodegame (PyPI)
- Feb 25, 2023
Malicious code in py-studystring (PyPI)
- Feb 25, 2023
Malicious code in py-prooflibmc (PyPI)
- Feb 25, 2023
Malicious code in libproofsuper (PyPI)
- Feb 25, 2023
Malicious code in esqpullhackedvirtual (PyPI)
- Feb 25, 2023
Malicious code in selfrelgtbgrand (PyPI)
- Feb 25, 2023
Malicious code in py-stringvisarand (PyPI)
- Feb 25, 2023
Malicious code in py-infoponghttp (PyPI)
- Feb 25, 2023
Malicious code in esqloadvisa (PyPI)
- Feb 25, 2023
Malicious code in esqkillram (PyPI)
- Feb 25, 2023
Malicious code in esqcraftkilllib (PyPI)
- Feb 25, 2023
Malicious code in tpcandycc (PyPI)
- Feb 25, 2023
Malicious code in selfhttpproof (PyPI)
- Feb 25, 2023
Malicious code in selfhackedinfo (PyPI)
- Feb 25, 2023
Malicious code in selfhackedccmc (PyPI)
- Feb 25, 2023
Malicious code in libstrpullpost (PyPI)
- Feb 25, 2023
Malicious code in tpcpulgtb (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalintel (PyPI)
- Feb 25, 2023
Malicious code in py-randomloadcandy (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbencode (PyPI)
- Feb 25, 2023
Malicious code in libhydracraftrand (PyPI)
- Feb 25, 2023
Malicious code in esqgetvisacraft (PyPI)
- Feb 25, 2023
Malicious code in selfstudygrand (PyPI)
- Feb 25, 2023
Malicious code in selfloadintel (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbadget (PyPI)
- Feb 25, 2023
Malicious code in selfgamepingurl (PyPI)
- Feb 25, 2023
Malicious code in py-verintsplit (PyPI)
- Feb 25, 2023
Malicious code in py-strlgtbstudy (PyPI)
- Feb 25, 2023
Malicious code in esqkillpywreplace (PyPI)
- Feb 25, 2023
Malicious code in selfrandompep (PyPI)
- Feb 25, 2023
Malicious code in libpywgame (PyPI)
- Feb 25, 2023
Malicious code in esqrecandy (PyPI)
- Feb 25, 2023
Malicious code in esqinfoproofvm (PyPI)
- Feb 25, 2023
Malicious code in esqadpaypal (PyPI)
- Feb 25, 2023
Malicious code in libramvmver (PyPI)
- Feb 25, 2023
Malicious code in libcraftstringcc (PyPI)
Page 157 of 232