Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-intstr (PyPI)
- Feb 25, 2023
Malicious code in selfstringurlgrand (PyPI)
- Feb 25, 2023
Malicious code in selfstringpaypalcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpingcpuad (PyPI)
- Feb 25, 2023
Malicious code in selfintcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfgetinthydra (PyPI)
- Feb 25, 2023
Malicious code in esqedgrandpull (PyPI)
- Feb 25, 2023
Malicious code in esqccencode (PyPI)
- Feb 25, 2023
Malicious code in tprehacked (PyPI)
- Feb 25, 2023
Malicious code in tppongsplitrandom (PyPI)
- Feb 25, 2023
Malicious code in tphttpad (PyPI)
- Feb 25, 2023
Malicious code in selfstringcandycv (PyPI)
- Feb 25, 2023
Malicious code in py-vminforeplace (PyPI)
- Feb 25, 2023
Malicious code in libstringstringgame (PyPI)
- Feb 25, 2023
Malicious code in libgetpy (PyPI)
- Feb 25, 2023
Malicious code in esqsplithttpmc (PyPI)
- Feb 25, 2023
Malicious code in selfrandomhydratool (PyPI)
- Feb 25, 2023
Malicious code in py-postultra (PyPI)
- Feb 25, 2023
Malicious code in py-pingpostkill (PyPI)
- Feb 25, 2023
Malicious code in py-loadintel (PyPI)
- Feb 25, 2023
Malicious code in libosintstringcandy (PyPI)
- Feb 25, 2023
Malicious code in libadstudypyw (PyPI)
- Feb 25, 2023
Malicious code in tpproofpushram (PyPI)
- Feb 25, 2023
Malicious code in selfstringstringgrand (PyPI)
- Feb 25, 2023
Malicious code in selfosinthackedpy (PyPI)
- Feb 25, 2023
Malicious code in libregame (PyPI)
- Feb 25, 2023
Malicious code in libloadpulllib (PyPI)
- Feb 25, 2023
Malicious code in libhydracvnvidia (PyPI)
- Feb 25, 2023
Malicious code in tprandpong (PyPI)
- Feb 25, 2023
Malicious code in selflibkill (PyPI)
- Feb 25, 2023
Malicious code in selfhydravmpaypal (PyPI)
- Feb 25, 2023
Malicious code in libverpip (PyPI)
- Feb 25, 2023
Malicious code in tpintelkillultra (PyPI)
- Feb 25, 2023
Malicious code in selfsuperhackedpy (PyPI)
- Feb 25, 2023
Malicious code in py-hydraurl (PyPI)
- Feb 25, 2023
Malicious code in esqpywmchttp (PyPI)
- Feb 25, 2023
Malicious code in selfvisavirtualmask (PyPI)
- Feb 25, 2023
Malicious code in py-killintel (PyPI)
- Feb 25, 2023
Malicious code in esqrandhacked (PyPI)
- Feb 25, 2023
Malicious code in tpresplitpull (PyPI)
- Feb 25, 2023
Malicious code in py-pongcraft (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmask (PyPI)
- Feb 25, 2023
Malicious code in selfcpure (PyPI)
- Feb 25, 2023
Malicious code in py-studypush (PyPI)
- Feb 25, 2023
Malicious code in py-maskgrand (PyPI)
- Feb 25, 2023
Malicious code in py-pymaskrand (PyPI)
- Feb 25, 2023
Malicious code in esqproofgetosint (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualhttpget (PyPI)
- Feb 25, 2023
Malicious code in esqpostver (PyPI)
- Feb 25, 2023
Malicious code in libstrget (PyPI)
Page 162 of 232