Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libgetcccandy (PyPI)
- Feb 25, 2023
Malicious code in tpvisapostping (PyPI)
- Feb 25, 2023
Malicious code in tppeppaypalhttp (PyPI)
- Feb 25, 2023
Malicious code in selfrandomgui (PyPI)
- Feb 25, 2023
Malicious code in py-ultracv (PyPI)
- Feb 25, 2023
Malicious code in libvirtualgame (PyPI)
- Feb 25, 2023
Malicious code in libstudyreplace (PyPI)
- Feb 25, 2023
Malicious code in libmaskreurl (PyPI)
- Feb 25, 2023
Malicious code in libcpuhydraintel (PyPI)
- Feb 25, 2023
Malicious code in esqramcv (PyPI)
- Feb 25, 2023
Malicious code in esqpepmaskram (PyPI)
- Feb 25, 2023
Malicious code in tprandpullstudy (PyPI)
- Feb 25, 2023
Malicious code in tpproofreplace (PyPI)
- Feb 25, 2023
Malicious code in py-ramsplitcandy (PyPI)
- Feb 25, 2023
Malicious code in esqstudykillrand (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiahttpvm (PyPI)
- Feb 25, 2023
Malicious code in esqmccvvirtual (PyPI)
- Feb 25, 2023
Malicious code in esqloadvercv (PyPI)
- Feb 25, 2023
Malicious code in selfpyping (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalad (PyPI)
- Feb 25, 2023
Malicious code in py-pingcraftmc (PyPI)
- Feb 25, 2023
Malicious code in py-intelvm (PyPI)
- Feb 25, 2023
Malicious code in py-hydraosinthydra (PyPI)
- Feb 25, 2023
Malicious code in libhttpcvurl (PyPI)
- Feb 25, 2023
Malicious code in esqvisaint (PyPI)
- Feb 25, 2023
Malicious code in esqpullkill (PyPI)
- Feb 25, 2023
Malicious code in esqosintvmpull (PyPI)
- Feb 25, 2023
Malicious code in esqminepysuper (PyPI)
- Feb 25, 2023
Malicious code in tploadpingrand (PyPI)
- Feb 25, 2023
Malicious code in tplibtoolhacked (PyPI)
- Feb 25, 2023
Malicious code in selfvmpyw (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpip (PyPI)
- Feb 25, 2023
Malicious code in libpingvisagui (PyPI)
- Feb 25, 2023
Malicious code in libcvverstr (PyPI)
- Feb 25, 2023
Malicious code in tpinfoproof (PyPI)
- Feb 25, 2023
Malicious code in tphackedrandomstring (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolram (PyPI)
- Feb 25, 2023
Malicious code in selfintgame (PyPI)
- Feb 25, 2023
Malicious code in py-virtualhydra (PyPI)
- Feb 25, 2023
Malicious code in py-pongpostmask (PyPI)
- Feb 25, 2023
Malicious code in librandomvm (PyPI)
- Feb 25, 2023
Malicious code in libpipcraftload (PyPI)
- Feb 25, 2023
Malicious code in esqvisapullre (PyPI)
- Feb 25, 2023
Malicious code in tphackedsplitcraft (PyPI)
- Feb 25, 2023
Malicious code in tpguimask (PyPI)
- Feb 25, 2023
Malicious code in selfpingcc (PyPI)
- Feb 25, 2023
Malicious code in selfencodevmcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-randomcpu (PyPI)
- Feb 25, 2023
Malicious code in libosintmask (PyPI)
- Feb 25, 2023
Malicious code in esqpullrandomsplit (PyPI)
Page 172 of 232