Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfpepmask (PyPI)
- Feb 25, 2023
Malicious code in selfinfomc (PyPI)
- Feb 25, 2023
Malicious code in tprampush (PyPI)
- Feb 25, 2023
Malicious code in selfmaskhydrapong (PyPI)
- Feb 25, 2023
Malicious code in py-getpushgui (PyPI)
- Feb 25, 2023
Malicious code in py-virtualload (PyPI)
- Feb 25, 2023
Malicious code in py-verpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-cvvisacpu (PyPI)
- Feb 25, 2023
Malicious code in tpccrandom (PyPI)
- Feb 25, 2023
Malicious code in py-verpyw (PyPI)
- Feb 25, 2023
Malicious code in libnvidiapippaypal (PyPI)
- Feb 25, 2023
Malicious code in esqpipstrvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpsuperurlload (PyPI)
- Feb 25, 2023
Malicious code in tpcraftpeplib (PyPI)
- Feb 25, 2023
Malicious code in liburlultra (PyPI)
- Feb 25, 2023
Malicious code in esqgetproofpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfcpustrreplace (PyPI)
- Feb 25, 2023
Malicious code in libmcencodeed (PyPI)
- Feb 25, 2023
Malicious code in tpsplitstr (PyPI)
- Feb 25, 2023
Malicious code in libvirtualpep (PyPI)
- Feb 25, 2023
Malicious code in esqgetvm (PyPI)
- Feb 25, 2023
Malicious code in selfstringrandomcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-osintpyw (PyPI)
- Feb 25, 2023
Malicious code in libvmrandomgui (PyPI)
- Feb 25, 2023
Malicious code in libguistrmc (PyPI)
- Feb 25, 2023
Malicious code in tpstrcccv (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiaver (PyPI)
- Feb 25, 2023
Malicious code in tpmaskvisareplace (PyPI)
- Feb 25, 2023
Malicious code in tpkillgame (PyPI)
- Feb 25, 2023
Malicious code in selfultraram (PyPI)
- Feb 25, 2023
Malicious code in selfsuperultra (PyPI)
- Feb 25, 2023
Malicious code in selfcvpy (PyPI)
- Feb 25, 2023
Malicious code in py-loadpycraft (PyPI)
- Feb 25, 2023
Malicious code in libultraram (PyPI)
- Feb 25, 2023
Malicious code in esqpushkill (PyPI)
- Feb 25, 2023
Malicious code in esqedcpumask (PyPI)
- Feb 25, 2023
Malicious code in tpstringmced (PyPI)
- Feb 25, 2023
Malicious code in tprecpu (PyPI)
- Feb 25, 2023
Malicious code in tphttpgetload (PyPI)
- Feb 25, 2023
Malicious code in selfsupertool (PyPI)
- Feb 25, 2023
Malicious code in selfreloadlib (PyPI)
- Feb 25, 2023
Malicious code in selfmaskpong (PyPI)
- Feb 25, 2023
Malicious code in py-verurl (PyPI)
- Feb 25, 2023
Malicious code in py-replacerandom (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpost (PyPI)
- Feb 25, 2023
Malicious code in libmaskhackedsplit (PyPI)
- Feb 25, 2023
Malicious code in libkillvisare (PyPI)
- Feb 25, 2023
Malicious code in esqpushvm (PyPI)
- Feb 25, 2023
Malicious code in esqpushget (PyPI)
- Feb 25, 2023
Malicious code in tpadcandy (PyPI)
Page 168 of 232