Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,584 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tpnvidiapyw (PyPI)
- Feb 25, 2023
Malicious code in selfvmpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfkillcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfintcontrolgrand (PyPI)
- Feb 25, 2023
Malicious code in liburlsuperpost (PyPI)
- Feb 25, 2023
Malicious code in libccraminfo (PyPI)
- Feb 25, 2023
Malicious code in esqrehttpinfo (PyPI)
- Feb 25, 2023
Malicious code in esqpushhttp (PyPI)
- Feb 25, 2023
Malicious code in esqpullurlget (PyPI)
- Feb 25, 2023
Malicious code in esqmcrand (PyPI)
- Feb 25, 2023
Malicious code in esqinthacked (PyPI)
- Feb 25, 2023
Malicious code in selfpipcpu (PyPI)
- Feb 25, 2023
Malicious code in selfgrandminepep (PyPI)
- Feb 25, 2023
Malicious code in selfgrandcandy (PyPI)
- Feb 25, 2023
Malicious code in selfcvhackedre (PyPI)
- Feb 25, 2023
Malicious code in py-paypalpippep (PyPI)
- Feb 25, 2023
Malicious code in py-guiminepep (PyPI)
- Feb 25, 2023
Malicious code in py-getsplitvisa (PyPI)
- Feb 25, 2023
Malicious code in esqvmvisa (PyPI)
- Feb 25, 2023
Malicious code in esqintelinfo (PyPI)
- Feb 25, 2023
Malicious code in tpsplitmcvisa (PyPI)
- Feb 25, 2023
Malicious code in tppullreplacehttp (PyPI)
- Feb 25, 2023
Malicious code in tpguimine (PyPI)
- Feb 25, 2023
Malicious code in selfintnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbrandomsplit (PyPI)
- Feb 25, 2023
Malicious code in libultratoolvm (PyPI)
- Feb 25, 2023
Malicious code in tppywgetload (PyPI)
- Feb 25, 2023
Malicious code in tpproofstudy (PyPI)
- Feb 25, 2023
Malicious code in tpproofsplitcc (PyPI)
- Feb 25, 2023
Malicious code in tpgrandproof (PyPI)
- Feb 25, 2023
Malicious code in selfvisanvidia (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualpep (PyPI)
- Feb 25, 2023
Malicious code in selfguivirtualkill (PyPI)
- Feb 25, 2023
Malicious code in selfedmask (PyPI)
- Feb 25, 2023
Malicious code in selfccmcpush (PyPI)
- Feb 25, 2023
Malicious code in py-controlstrcraft (PyPI)
- Feb 25, 2023
Malicious code in esqverramstr (PyPI)
- Feb 25, 2023
Malicious code in esqinfoedpush (PyPI)
- Feb 25, 2023
Malicious code in tppippypull (PyPI)
- Feb 25, 2023
Malicious code in selfloadkillstring (PyPI)
- Feb 25, 2023
Malicious code in selfkillvirtual (PyPI)
- Feb 25, 2023
Malicious code in selfinfoint (PyPI)
- Feb 25, 2023
Malicious code in py-intelgame (PyPI)
- Feb 25, 2023
Malicious code in py-infover (PyPI)
- Feb 25, 2023
Malicious code in py-candyultra (PyPI)
- Feb 25, 2023
Malicious code in tploadcc (PyPI)
- Feb 25, 2023
Malicious code in selfvisapep (PyPI)
- Feb 25, 2023
Malicious code in py-ultracraft (PyPI)
- Feb 25, 2023
Malicious code in py-loadpostpush (PyPI)
- Feb 25, 2023
Malicious code in librandomcontrol (PyPI)
Page 164 of 232