Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tprelibcpu (PyPI)
- Feb 25, 2023
Malicious code in tpencodecpupong (PyPI)
- Feb 25, 2023
Malicious code in selfpipstringcc (PyPI)
- Feb 25, 2023
Malicious code in selfpepkill (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmaskultra (PyPI)
- Feb 25, 2023
Malicious code in selfgeturl (PyPI)
- Feb 25, 2023
Malicious code in selfcvproofsuper (PyPI)
- Feb 25, 2023
Malicious code in py-maskosintpull (PyPI)
- Feb 25, 2023
Malicious code in libvisamc (PyPI)
- Feb 25, 2023
Malicious code in libstringgetosint (PyPI)
- Feb 25, 2023
Malicious code in librandomget (PyPI)
- Feb 25, 2023
Malicious code in libpullstring (PyPI)
- Feb 25, 2023
Malicious code in esqrepyvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpramguihttp (PyPI)
- Feb 25, 2023
Malicious code in tpgetstr (PyPI)
- Feb 25, 2023
Malicious code in tpcpugetping (PyPI)
- Feb 25, 2023
Malicious code in selfvergui (PyPI)
- Feb 25, 2023
Malicious code in py-pipstudystr (PyPI)
- Feb 25, 2023
Malicious code in py-gameremc (PyPI)
- Feb 25, 2023
Malicious code in libpullcandy (PyPI)
- Feb 25, 2023
Malicious code in libinfohacked (PyPI)
- Feb 25, 2023
Malicious code in libgrandosintencode (PyPI)
- Feb 25, 2023
Malicious code in esqpepvirtualinfo (PyPI)
- Feb 25, 2023
Malicious code in tpurled (PyPI)
- Feb 25, 2023
Malicious code in tpintelre (PyPI)
- Feb 25, 2023
Malicious code in selfguiinteled (PyPI)
- Feb 25, 2023
Malicious code in py-loadcpugui (PyPI)
- Feb 25, 2023
Malicious code in libsplitrandre (PyPI)
- Feb 25, 2023
Malicious code in libnvidiaencodehacked (PyPI)
- Feb 25, 2023
Malicious code in libmaskrandomcc (PyPI)
- Feb 25, 2023
Malicious code in libgamecontrol (PyPI)
- Feb 25, 2023
Malicious code in esqpingnvidia (PyPI)
- Feb 25, 2023
Malicious code in tpretoolproof (PyPI)
- Feb 25, 2023
Malicious code in tphackeded (PyPI)
- Feb 25, 2023
Malicious code in libinfore (PyPI)
- Feb 25, 2023
Malicious code in libcpuinted (PyPI)
- Feb 25, 2023
Malicious code in esqurlmine (PyPI)
- Feb 25, 2023
Malicious code in esqlibstrpost (PyPI)
- Feb 25, 2023
Malicious code in tpminevirtual (PyPI)
- Feb 25, 2023
Malicious code in tploadreplace (PyPI)
- Feb 25, 2023
Malicious code in py-pypywpy (PyPI)
- Feb 25, 2023
Malicious code in py-hackedcandyhttp (PyPI)
- Feb 25, 2023
Malicious code in libpushgrand (PyPI)
- Feb 25, 2023
Malicious code in tpreinfo (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiahttpreplace (PyPI)
- Feb 25, 2023
Malicious code in tpcved (PyPI)
- Feb 25, 2023
Malicious code in selframcandysplit (PyPI)
- Feb 25, 2023
Malicious code in py-virtualsplit (PyPI)
- Feb 25, 2023
Malicious code in py-regrand (PyPI)
- Feb 25, 2023
Malicious code in py-pingadkill (PyPI)
Page 161 of 232