Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-gamesuper (PyPI)
- Feb 25, 2023
Malicious code in selframpushrand (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualpong (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualinfovirtual (PyPI)
- Feb 25, 2023
Malicious code in selfloadvisa (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiastring (PyPI)
- Feb 25, 2023
Malicious code in libstringpy (PyPI)
- Feb 25, 2023
Malicious code in liblibgame (PyPI)
- Feb 25, 2023
Malicious code in libintelinfostr (PyPI)
- Feb 25, 2023
Malicious code in libcpumineed (PyPI)
- Feb 25, 2023
Malicious code in libadstringstudy (PyPI)
- Feb 25, 2023
Malicious code in esqsplitpushhydra (PyPI)
- Feb 25, 2023
Malicious code in esqpushload (PyPI)
- Feb 25, 2023
Malicious code in tpsuperping (PyPI)
- Feb 25, 2023
Malicious code in tprandomloadpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalosintmine (PyPI)
- Feb 25, 2023
Malicious code in selfgrandencodecv (PyPI)
- Feb 25, 2023
Malicious code in py-infostring (PyPI)
- Feb 25, 2023
Malicious code in libsuperinfo (PyPI)
- Feb 25, 2023
Malicious code in libinfosuperint (PyPI)
- Feb 25, 2023
Malicious code in esqsupertool (PyPI)
- Feb 25, 2023
Malicious code in esqcvstudycraft (PyPI)
- Feb 25, 2023
Malicious code in tpadtool (PyPI)
- Feb 25, 2023
Malicious code in selfvmload (PyPI)
- Feb 25, 2023
Malicious code in selfstringlgtbhttp (PyPI)
- Feb 25, 2023
Malicious code in py-virtualpaypalcraft (PyPI)
- Feb 25, 2023
Malicious code in py-minereplacesuper (PyPI)
- Feb 25, 2023
Malicious code in py-infoinfo (PyPI)
- Feb 25, 2023
Malicious code in py-candystring (PyPI)
- Feb 25, 2023
Malicious code in libpushpyw (PyPI)
- Feb 25, 2023
Malicious code in libcontrolosint (PyPI)
- Feb 25, 2023
Malicious code in esqpostcraft (PyPI)
- Feb 25, 2023
Malicious code in esqkillultrarand (PyPI)
- Feb 25, 2023
Malicious code in tpvisaproof (PyPI)
- Feb 25, 2023
Malicious code in py-visaurlosint (PyPI)
- Feb 25, 2023
Malicious code in libmcintel (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpyw (PyPI)
- Feb 25, 2023
Malicious code in libinthydragrand (PyPI)
- Feb 25, 2023
Malicious code in esqvmvisapush (PyPI)
- Feb 25, 2023
Malicious code in esqpypaypalurl (PyPI)
- Feb 25, 2023
Malicious code in esqcpucraftstudy (PyPI)
- Feb 25, 2023
Malicious code in tpultralgtbcandy (PyPI)
- Feb 25, 2023
Malicious code in tppywed (PyPI)
- Feb 25, 2023
Malicious code in selflibliblib (PyPI)
- Feb 25, 2023
Malicious code in py-gameramcandy (PyPI)
- Feb 25, 2023
Malicious code in py-candykillencode (PyPI)
- Feb 25, 2023
Malicious code in libstringcandy (PyPI)
- Feb 25, 2023
Malicious code in librandcraftvirtual (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalosintpost (PyPI)
Page 163 of 232