Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqreplacepull (PyPI)
- Feb 25, 2023
Malicious code in esqpywloadmask (PyPI)
- Feb 25, 2023
Malicious code in tpgetsuperurl (PyPI)
- Feb 25, 2023
Malicious code in tpencodesuper (PyPI)
- Feb 25, 2023
Malicious code in py-killsuper (PyPI)
- Feb 25, 2023
Malicious code in libcontrolramhacked (PyPI)
- Feb 25, 2023
Malicious code in esqvmccmc (PyPI)
- Feb 25, 2023
Malicious code in esqurlver (PyPI)
- Feb 25, 2023
Malicious code in esqtoolcvsplit (PyPI)
- Feb 25, 2023
Malicious code in esqpywramultra (PyPI)
- Feb 25, 2023
Malicious code in esqmineultramask (PyPI)
- Feb 25, 2023
Malicious code in tpvisapull (PyPI)
- Feb 25, 2023
Malicious code in selfverproofrandom (PyPI)
- Feb 25, 2023
Malicious code in selfproofgame (PyPI)
- Feb 25, 2023
Malicious code in selfloadcc (PyPI)
- Feb 25, 2023
Malicious code in selfgamekilltool (PyPI)
- Feb 25, 2023
Malicious code in py-peplgtb (PyPI)
- Feb 25, 2023
Malicious code in py-encodeinfogui (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalvisa (PyPI)
- Feb 25, 2023
Malicious code in esqhttpvisaed (PyPI)
- Feb 25, 2023
Malicious code in esqedhydraed (PyPI)
- Feb 25, 2023
Malicious code in esqccstring (PyPI)
- Feb 25, 2023
Malicious code in tphackedinfo (PyPI)
- Feb 25, 2023
Malicious code in selfmcadpep (PyPI)
- Feb 25, 2023
Malicious code in selfinfocandy (PyPI)
- Feb 25, 2023
Malicious code in selfguiget (PyPI)
- Feb 25, 2023
Malicious code in selfcandyintpyw (PyPI)
- Feb 25, 2023
Malicious code in py-osintgui (PyPI)
- Feb 25, 2023
Malicious code in libmcmaskkill (PyPI)
- Feb 25, 2023
Malicious code in esqurllgtbpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfadencode (PyPI)
- Feb 25, 2023
Malicious code in py-postrandint (PyPI)
- Feb 25, 2023
Malicious code in py-cvpepurl (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpingnvidia (PyPI)
- Feb 25, 2023
Malicious code in libcontrolguiget (PyPI)
- Feb 25, 2023
Malicious code in esqhttpintelinfo (PyPI)
- Feb 25, 2023
Malicious code in tpvmguiultra (PyPI)
- Feb 25, 2023
Malicious code in tpurlstr (PyPI)
- Feb 25, 2023
Malicious code in tpcontrollib (PyPI)
- Feb 25, 2023
Malicious code in py-vmgrand (PyPI)
- Feb 25, 2023
Malicious code in esqstringpingpong (PyPI)
- Feb 25, 2023
Malicious code in esqpypingintel (PyPI)
- Feb 25, 2023
Malicious code in esqintcvlgtb (PyPI)
- Feb 25, 2023
Malicious code in py-splitgamecraft (PyPI)
- Feb 25, 2023
Malicious code in py-maskpyw (PyPI)
- Feb 25, 2023
Malicious code in py-loadcpu (PyPI)
- Feb 25, 2023
Malicious code in py-libvm (PyPI)
- Feb 25, 2023
Malicious code in libvirtualhydra (PyPI)
- Feb 25, 2023
Malicious code in tplgtbgamestudy (PyPI)
- Feb 25, 2023
Malicious code in tpadstr (PyPI)
Page 167 of 232