Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-encodeultra (PyPI)
- Feb 25, 2023
Malicious code in py-cvpy (PyPI)
- Feb 25, 2023
Malicious code in libsplitosint (PyPI)
- Feb 25, 2023
Malicious code in librepost (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiahydraultra (PyPI)
- Feb 25, 2023
Malicious code in esqhydraponglib (PyPI)
- Feb 25, 2023
Malicious code in tpvercpu (PyPI)
- Feb 25, 2023
Malicious code in tppostrandomsplit (PyPI)
- Feb 25, 2023
Malicious code in tpkillpush (PyPI)
- Feb 25, 2023
Malicious code in tpintelkill (PyPI)
- Feb 25, 2023
Malicious code in tpcvcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfpepsplitram (PyPI)
- Feb 25, 2023
Malicious code in selflibtool (PyPI)
- Feb 25, 2023
Malicious code in py-pippip (PyPI)
- Feb 25, 2023
Malicious code in libinfohydravirtual (PyPI)
- Feb 25, 2023
Malicious code in libhydrapongstudy (PyPI)
- Feb 25, 2023
Malicious code in esqvermaskping (PyPI)
- Feb 25, 2023
Malicious code in esqpongultra (PyPI)
- Feb 25, 2023
Malicious code in esqhttpping (PyPI)
- Feb 25, 2023
Malicious code in selfultracpu (PyPI)
- Feb 25, 2023
Malicious code in selfstrcc (PyPI)
- Feb 25, 2023
Malicious code in py-virtualgetvm (PyPI)
- Feb 25, 2023
Malicious code in py-pinghydra (PyPI)
- Feb 25, 2023
Malicious code in esqurlhackedrand (PyPI)
- Feb 25, 2023
Malicious code in esqstringpushload (PyPI)
- Feb 25, 2023
Malicious code in esqcandygrandtool (PyPI)
- Feb 25, 2023
Malicious code in selfstrspliturl (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmcpong (PyPI)
- Feb 25, 2023
Malicious code in py-vmcontrolgrand (PyPI)
- Feb 25, 2023
Malicious code in py-virtualpip (PyPI)
- Feb 25, 2023
Malicious code in py-studygame (PyPI)
- Feb 25, 2023
Malicious code in py-killcandyosint (PyPI)
- Feb 25, 2023
Malicious code in esqtoolmaskver (PyPI)
- Feb 25, 2023
Malicious code in esqpipvisacv (PyPI)
- Feb 25, 2023
Malicious code in esqintstudy (PyPI)
- Feb 25, 2023
Malicious code in esqgamepystudy (PyPI)
- Feb 25, 2023
Malicious code in esqadpip (PyPI)
- Feb 25, 2023
Malicious code in tpurlstudy (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiapush (PyPI)
- Feb 25, 2023
Malicious code in selfminehydraload (PyPI)
- Feb 25, 2023
Malicious code in py-hydrapost (PyPI)
- Feb 25, 2023
Malicious code in py-cvint (PyPI)
- Feb 25, 2023
Malicious code in libpostping (PyPI)
- Feb 25, 2023
Malicious code in tpencodecandy (PyPI)
- Feb 25, 2023
Malicious code in selfvmrandom (PyPI)
- Feb 25, 2023
Malicious code in py-proofmask (PyPI)
- Feb 25, 2023
Malicious code in py-libverstr (PyPI)
- Feb 25, 2023
Malicious code in py-libstring (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbminecc (PyPI)
- Feb 25, 2023
Malicious code in librandomguitool (PyPI)
Page 166 of 232