Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqrandomgui (PyPI)
- Feb 25, 2023
Malicious code in tptoolkill (PyPI)
- Feb 25, 2023
Malicious code in libultralib (PyPI)
- Feb 25, 2023
Malicious code in libpywgui (PyPI)
- Feb 25, 2023
Malicious code in libcandygame (PyPI)
- Feb 25, 2023
Malicious code in esqrandver (PyPI)
- Feb 25, 2023
Malicious code in esqccpy (PyPI)
- Feb 25, 2023
Malicious code in tphydraencode (PyPI)
- Feb 25, 2023
Malicious code in py-replacepyw (PyPI)
- Feb 25, 2023
Malicious code in libpongload (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpong (PyPI)
- Feb 25, 2023
Malicious code in libgetstudy (PyPI)
- Feb 25, 2023
Malicious code in esqhydratool (PyPI)
- Feb 25, 2023
Malicious code in tppypip (PyPI)
- Feb 25, 2023
Malicious code in selfpongurl (PyPI)
- Feb 25, 2023
Malicious code in selfpepad (PyPI)
- Feb 25, 2023
Malicious code in libmaskvirtual (PyPI)
- Feb 25, 2023
Malicious code in libinforam (PyPI)
- Feb 25, 2023
Malicious code in esqrandmask (PyPI)
- Feb 25, 2023
Malicious code in esqramhydra (PyPI)
- Feb 25, 2023
Malicious code in selfencodeload (PyPI)
- Feb 25, 2023
Malicious code in libpullgui (PyPI)
- Feb 25, 2023
Malicious code in libpongmc (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiasplit (PyPI)
- Feb 25, 2023
Malicious code in selfosintver (PyPI)
- Feb 25, 2023
Malicious code in py-guireplace (PyPI)
- Feb 25, 2023
Malicious code in esqhttplgtb (PyPI)
- Feb 25, 2023
Malicious code in tpstringmask (PyPI)
- Feb 25, 2023
Malicious code in tpedinfo (PyPI)
- Feb 25, 2023
Malicious code in libcraftinfo (PyPI)
- Feb 25, 2023
Malicious code in esqintelgrand (PyPI)
- Feb 25, 2023
Malicious code in tpreplacelib (PyPI)
- Feb 25, 2023
Malicious code in tppullpy (PyPI)
- Feb 25, 2023
Malicious code in tppostsplit (PyPI)
- Feb 25, 2023
Malicious code in selfosintping (PyPI)
- Feb 25, 2023
Malicious code in selfintcv (PyPI)
- Feb 25, 2023
Malicious code in selfhttpinfo (PyPI)
- Feb 25, 2023
Malicious code in libgrandmask (PyPI)
- Feb 25, 2023
Malicious code in py-pullencode (PyPI)
- Feb 25, 2023
Malicious code in selfgetgrand (PyPI)
- Feb 25, 2023
Malicious code in libgamemine (PyPI)
- Feb 25, 2023
Malicious code in esqtoolnvidia (PyPI)
- Feb 25, 2023
Malicious code in tpvisaosint (PyPI)
- Feb 25, 2023
Malicious code in tpultragui (PyPI)
- Feb 25, 2023
Malicious code in tppullpush (PyPI)
- Feb 25, 2023
Malicious code in tppaypalmine (PyPI)
- Feb 25, 2023
Malicious code in selfsupercandy (PyPI)
- Feb 25, 2023
Malicious code in selfhttpstring (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiakill (PyPI)
- Feb 25, 2023
Malicious code in esqcrafted (PyPI)
Page 177 of 232