Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfpullproof (PyPI)
- Feb 25, 2023
Malicious code in selfhydragamever (PyPI)
- Feb 25, 2023
Malicious code in selfgamemcnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfedload (PyPI)
- Feb 25, 2023
Malicious code in py-pullping (PyPI)
- Feb 25, 2023
Malicious code in py-pullnvidiacontrol (PyPI)
- Feb 25, 2023
Malicious code in py-mcrand (PyPI)
- Feb 25, 2023
Malicious code in py-getcrafttool (PyPI)
- Feb 25, 2023
Malicious code in py-controlcraftstr (PyPI)
- Feb 25, 2023
Malicious code in esqsupercpuurl (PyPI)
- Feb 25, 2023
Malicious code in esqcraftvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpstudyintmc (PyPI)
- Feb 25, 2023
Malicious code in tpreplaceget (PyPI)
- Feb 25, 2023
Malicious code in tphackedmask (PyPI)
- Feb 25, 2023
Malicious code in tpcvhydrastring (PyPI)
- Feb 25, 2023
Malicious code in tpadrandommc (PyPI)
- Feb 25, 2023
Malicious code in selfpepcc (PyPI)
- Feb 25, 2023
Malicious code in py-pongtoolkill (PyPI)
- Feb 25, 2023
Malicious code in py-candylgtb (PyPI)
- Feb 25, 2023
Malicious code in liburlinfogrand (PyPI)
- Feb 25, 2023
Malicious code in libtoolintencode (PyPI)
- Feb 25, 2023
Malicious code in libcontrolramre (PyPI)
- Feb 25, 2023
Malicious code in esqpeppull (PyPI)
- Feb 25, 2023
Malicious code in tppaypalintel (PyPI)
- Feb 25, 2023
Malicious code in tpgamelib (PyPI)
- Feb 25, 2023
Malicious code in selfinfopynvidia (PyPI)
- Feb 25, 2023
Malicious code in selfedadintel (PyPI)
- Feb 25, 2023
Malicious code in py-libedvm (PyPI)
- Feb 25, 2023
Malicious code in esqmaskad (PyPI)
- Feb 25, 2023
Malicious code in tpadtoolmc (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpushcraft (PyPI)
- Feb 25, 2023
Malicious code in selfliburlrand (PyPI)
- Feb 25, 2023
Malicious code in selfcontroledreplace (PyPI)
- Feb 25, 2023
Malicious code in py-replacere (PyPI)
- Feb 25, 2023
Malicious code in py-loadpep (PyPI)
- Feb 25, 2023
Malicious code in py-adping (PyPI)
- Feb 25, 2023
Malicious code in librandcraft (PyPI)
- Feb 25, 2023
Malicious code in libcvencode (PyPI)
- Feb 25, 2023
Malicious code in esqsupervirtualpy (PyPI)
- Feb 25, 2023
Malicious code in esqrandlgtb (PyPI)
- Feb 25, 2023
Malicious code in esqlibpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqcvrandomcontrol (PyPI)
- Feb 25, 2023
Malicious code in tpcvultra (PyPI)
- Feb 25, 2023
Malicious code in selfurlpywrandom (PyPI)
- Feb 25, 2023
Malicious code in selflibcpu (PyPI)
- Feb 25, 2023
Malicious code in selfinfocraftlib (PyPI)
- Feb 25, 2023
Malicious code in selfencodetoolcpu (PyPI)
- Feb 25, 2023
Malicious code in selfencodepywrand (PyPI)
- Feb 25, 2023
Malicious code in libstringpostvisa (PyPI)
- Feb 25, 2023
Malicious code in esqccpygrand (PyPI)
Page 169 of 232