Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,582 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tprelibpost (PyPI)
- Feb 25, 2023
Malicious code in tppiposintpost (PyPI)
- Feb 25, 2023
Malicious code in py-libvirtualram (PyPI)
- Feb 25, 2023
Malicious code in liblgtbstudy (PyPI)
- Feb 25, 2023
Malicious code in esqramreplace (PyPI)
- Feb 25, 2023
Malicious code in tpvminfopep (PyPI)
- Feb 25, 2023
Malicious code in tpsplitverpy (PyPI)
- Feb 25, 2023
Malicious code in selfurlhttp (PyPI)
- Feb 25, 2023
Malicious code in selfmccv (PyPI)
- Feb 25, 2023
Malicious code in py-cpurandom (PyPI)
- Feb 25, 2023
Malicious code in esqverrand (PyPI)
- Feb 25, 2023
Malicious code in esqsplitvm (PyPI)
- Feb 25, 2023
Malicious code in selfadcpu (PyPI)
- Feb 25, 2023
Malicious code in py-candycvproof (PyPI)
- Feb 25, 2023
Malicious code in libsuperhydrainfo (PyPI)
- Feb 25, 2023
Malicious code in libstringvmed (PyPI)
- Feb 25, 2023
Malicious code in libsplitencode (PyPI)
- Feb 25, 2023
Malicious code in esqsplitpepcv (PyPI)
- Feb 25, 2023
Malicious code in esqpywrandom (PyPI)
- Feb 25, 2023
Malicious code in tpvmmc (PyPI)
- Feb 25, 2023
Malicious code in py-proofencode (PyPI)
- Feb 25, 2023
Malicious code in selfpongreplaceed (PyPI)
- Feb 25, 2023
Malicious code in selfcandyultralib (PyPI)
- Feb 25, 2023
Malicious code in libloadgame (PyPI)
- Feb 25, 2023
Malicious code in tpsplitultra (PyPI)
- Feb 25, 2023
Malicious code in selfproofpingpaypal (PyPI)
- Feb 25, 2023
Malicious code in libgrandloadcv (PyPI)
- Feb 25, 2023
Malicious code in selfstrvisapaypal (PyPI)
- Feb 25, 2023
Malicious code in py-pywencode (PyPI)
- Feb 25, 2023
Malicious code in esqccinfo (PyPI)
- Feb 25, 2023
Malicious code in tploadget (PyPI)
- Feb 25, 2023
Malicious code in selflgtbhttp (PyPI)
- Feb 25, 2023
Malicious code in py-randpushint (PyPI)
- Feb 25, 2023
Malicious code in py-getcontrolvm (PyPI)
- Feb 25, 2023
Malicious code in esqcraftrammc (PyPI)
- Feb 25, 2023
Malicious code in libtoolpepcv (PyPI)
- Feb 25, 2023
Malicious code in selfosintcv (PyPI)
- Feb 25, 2023
Malicious code in py-encodelib (PyPI)
- Feb 25, 2023
Malicious code in libponginfo (PyPI)
- Feb 25, 2023
Malicious code in selfvmad (PyPI)
- Feb 25, 2023
Malicious code in selfurlsuper (PyPI)
- Feb 25, 2023
Malicious code in selfpepsplit (PyPI)
- Feb 25, 2023
Malicious code in py-raminfo (PyPI)
- Feb 25, 2023
Malicious code in py-infopy (PyPI)
- Feb 25, 2023
Malicious code in libvisagui (PyPI)
- Feb 25, 2023
Malicious code in esqtoolencode (PyPI)
- Feb 25, 2023
Malicious code in tptoolmc (PyPI)
- Feb 25, 2023
Malicious code in tpstrhttp (PyPI)
- Feb 25, 2023
Malicious code in tplibpy (PyPI)
- Feb 25, 2023
Malicious code in selfurlload (PyPI)
Page 173 of 232