Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tposintcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-urlram (PyPI)
- Feb 25, 2023
Malicious code in libhydrapong (PyPI)
- Feb 25, 2023
Malicious code in libcraftreplaceencode (PyPI)
- Feb 25, 2023
Malicious code in libccreplace (PyPI)
- Feb 25, 2023
Malicious code in py-strvirtual (PyPI)
- Feb 25, 2023
Malicious code in libhackedlgtbrand (PyPI)
- Feb 25, 2023
Malicious code in libguipylgtb (PyPI)
- Feb 25, 2023
Malicious code in esqvirtualmask (PyPI)
- Feb 25, 2023
Malicious code in tphydrapiprandom (PyPI)
- Feb 25, 2023
Malicious code in selfosintvmcraft (PyPI)
- Feb 25, 2023
Malicious code in selfhttpvmcontrol (PyPI)
- Feb 25, 2023
Malicious code in libstudysplitping (PyPI)
- Feb 25, 2023
Malicious code in esqguistudy (PyPI)
- Feb 25, 2023
Malicious code in tploadlgtb (PyPI)
- Feb 25, 2023
Malicious code in selfstrintel (PyPI)
- Feb 25, 2023
Malicious code in esqlgtbvm (PyPI)
- Feb 25, 2023
Malicious code in tpcraftloadpip (PyPI)
- Feb 25, 2023
Malicious code in tpccvirtualencode (PyPI)
- Feb 25, 2023
Malicious code in selfcvad (PyPI)
- Feb 25, 2023
Malicious code in py-controltool (PyPI)
- Feb 25, 2023
Malicious code in selftoolram (PyPI)
- Feb 25, 2023
Malicious code in selfhydralib (PyPI)
- Feb 25, 2023
Malicious code in libintnvidiagame (PyPI)
- Feb 25, 2023
Malicious code in tpstringlibpip (PyPI)
- Feb 25, 2023
Malicious code in tpminecc (PyPI)
- Feb 25, 2023
Malicious code in tpgameurl (PyPI)
- Feb 25, 2023
Malicious code in selfencodekill (PyPI)
- Feb 25, 2023
Malicious code in esqramed (PyPI)
- Feb 25, 2023
Malicious code in selfmineguipyw (PyPI)
- Feb 25, 2023
Malicious code in libhydravmmine (PyPI)
- Feb 25, 2023
Malicious code in py-mcloadpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqlgtbosint (PyPI)
- Feb 25, 2023
Malicious code in esqadsplit (PyPI)
- Feb 25, 2023
Malicious code in tppywvirtual (PyPI)
- Feb 25, 2023
Malicious code in selflibrandomcv (PyPI)
- Feb 25, 2023
Malicious code in selfhackedcvnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-adcpu (PyPI)
- Feb 25, 2023
Malicious code in esqurlpip (PyPI)
- Feb 25, 2023
Malicious code in esqcpucandy (PyPI)
- Feb 25, 2023
Malicious code in tprandomsplit (PyPI)
- Feb 25, 2023
Malicious code in tphttppipstring (PyPI)
- Feb 25, 2023
Malicious code in selfultravirtualpy (PyPI)
- Feb 25, 2023
Malicious code in selfencoderandom (PyPI)
- Feb 25, 2023
Malicious code in py-ultrastringget (PyPI)
- Feb 25, 2023
Malicious code in libvisastr (PyPI)
- Feb 25, 2023
Malicious code in libpushvisa (PyPI)
- Feb 25, 2023
Malicious code in libpullpep (PyPI)
- Feb 25, 2023
Malicious code in libminenvidiahydra (PyPI)
- Feb 25, 2023
Malicious code in esqcraftrandnvidia (PyPI)
Page 160 of 232