Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tpccpip (PyPI)
- Feb 25, 2023
Malicious code in selfpingpush (PyPI)
- Feb 25, 2023
Malicious code in selfpeppep (PyPI)
- Feb 25, 2023
Malicious code in py-vmmc (PyPI)
- Feb 25, 2023
Malicious code in py-mcpushmask (PyPI)
- Feb 25, 2023
Malicious code in py-cvverload (PyPI)
- Feb 25, 2023
Malicious code in py-controlmask (PyPI)
- Feb 25, 2023
Malicious code in esqpyinted (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalvmget (PyPI)
- Feb 25, 2023
Malicious code in tpurlguiint (PyPI)
- Feb 25, 2023
Malicious code in tpgrandsplitcv (PyPI)
- Feb 25, 2023
Malicious code in selfstudylgtb (PyPI)
- Feb 25, 2023
Malicious code in selfpongpytool (PyPI)
- Feb 25, 2023
Malicious code in py-pongcandyram (PyPI)
- Feb 25, 2023
Malicious code in py-gamerepong (PyPI)
- Feb 25, 2023
Malicious code in libpywrand (PyPI)
- Feb 25, 2023
Malicious code in selfhackedspliturl (PyPI)
- Feb 25, 2023
Malicious code in py-pongedvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiacandy (PyPI)
- Feb 25, 2023
Malicious code in esqstudyint (PyPI)
- Feb 25, 2023
Malicious code in esqstrosint (PyPI)
- Feb 25, 2023
Malicious code in tptoolstringpush (PyPI)
- Feb 25, 2023
Malicious code in tprandcandymask (PyPI)
- Feb 25, 2023
Malicious code in selfpipcandy (PyPI)
- Feb 25, 2023
Malicious code in selfgrandlgtbad (PyPI)
- Feb 25, 2023
Malicious code in py-loadmcvisa (PyPI)
- Feb 25, 2023
Malicious code in py-cvnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfpipcv (PyPI)
- Feb 25, 2023
Malicious code in selfhydrasplitpy (PyPI)
- Feb 25, 2023
Malicious code in selfhydrapong (PyPI)
- Feb 25, 2023
Malicious code in selfhydracpu (PyPI)
- Feb 25, 2023
Malicious code in libtoolcraftgrand (PyPI)
- Feb 25, 2023
Malicious code in esqvmgrandgrand (PyPI)
- Feb 25, 2023
Malicious code in tplgtbload (PyPI)
- Feb 25, 2023
Malicious code in selfintproofintel (PyPI)
- Feb 25, 2023
Malicious code in py-visapyw (PyPI)
- Feb 25, 2023
Malicious code in tppepcontrolstring (PyPI)
- Feb 25, 2023
Malicious code in tpcpuadpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-strvm (PyPI)
- Feb 25, 2023
Malicious code in esqpongram (PyPI)
- Feb 25, 2023
Malicious code in tpproofadpyw (PyPI)
- Feb 25, 2023
Malicious code in tpinfovirtualpost (PyPI)
- Feb 25, 2023
Malicious code in py-pepproof (PyPI)
- Feb 25, 2023
Malicious code in libosintpostvisa (PyPI)
- Feb 25, 2023
Malicious code in esqsupergame (PyPI)
- Feb 25, 2023
Malicious code in py-renvidia (PyPI)
- Feb 25, 2023
Malicious code in py-pippushosint (PyPI)
- Feb 25, 2023
Malicious code in py-libhttpmc (PyPI)
- Feb 25, 2023
Malicious code in libvmproofcc (PyPI)
- Feb 25, 2023
Malicious code in tplgtbinfo (PyPI)
Page 170 of 232