Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tppywmc (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbping (PyPI)
- Feb 25, 2023
Malicious code in py-intvisa (PyPI)
- Feb 25, 2023
Malicious code in py-getstr (PyPI)
- Feb 25, 2023
Malicious code in py-cvencode (PyPI)
- Feb 25, 2023
Malicious code in esqurlget (PyPI)
- Feb 25, 2023
Malicious code in tpcvinfo (PyPI)
- Feb 25, 2023
Malicious code in py-controlrand (PyPI)
- Feb 25, 2023
Malicious code in librere (PyPI)
- Feb 25, 2023
Malicious code in libmaskload (PyPI)
- Feb 25, 2023
Malicious code in tppullcv (PyPI)
- Feb 25, 2023
Malicious code in py-visagrand (PyPI)
- Feb 25, 2023
Malicious code in py-postget (PyPI)
- Feb 25, 2023
Malicious code in py-encodeurl (PyPI)
- Feb 25, 2023
Malicious code in libgrandpong (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualhttp (PyPI)
- Feb 25, 2023
Malicious code in py-vmstudy (PyPI)
- Feb 25, 2023
Malicious code in py-paypalpyw (PyPI)
- Feb 25, 2023
Malicious code in esqgrandvm (PyPI)
- Feb 25, 2023
Malicious code in selfverrand (PyPI)
- Feb 25, 2023
Malicious code in py-libpull (PyPI)
- Feb 25, 2023
Malicious code in esqsplitstr (PyPI)
- Feb 25, 2023
Malicious code in esqloadcandy (PyPI)
- Feb 25, 2023
Malicious code in selfsupervisa (PyPI)
- Feb 25, 2023
Malicious code in selfintelcpu (PyPI)
- Feb 25, 2023
Malicious code in py-getlib (PyPI)
- Feb 25, 2023
Malicious code in esqminecv (PyPI)
- Feb 25, 2023
Malicious code in tpsplitram (PyPI)
- Feb 25, 2023
Malicious code in selfrehttp (PyPI)
- Feb 25, 2023
Malicious code in esqcandyinfo (PyPI)
- Feb 25, 2023
Malicious code in py-peppy (PyPI)
- Feb 25, 2023
Malicious code in esqcpurand (PyPI)
- Feb 25, 2023
Malicious code in tpgamehacked (PyPI)
- Feb 25, 2023
Malicious code in esqminekill (PyPI)
- Feb 25, 2023
Malicious code in py-randver (PyPI)
- Feb 25, 2023
Malicious code in py-gameram (PyPI)
- Feb 25, 2023
Malicious code in py-encoderam (PyPI)
- Feb 25, 2023
Malicious code in esqvisaencode (PyPI)
- Feb 25, 2023
Malicious code in selfccgame (PyPI)
- Feb 25, 2023
Malicious code in py-toolkill (PyPI)
- Feb 25, 2023
Malicious code in esqlibpost (PyPI)
- Feb 25, 2023
Malicious code in esqcved (PyPI)
- Feb 25, 2023
Malicious code in tpreplacepush (PyPI)
- Feb 25, 2023
Malicious code in selfpullint (PyPI)
- Feb 25, 2023
Malicious code in py-osintvisa (PyPI)
- Feb 25, 2023
Malicious code in esqsplitping (PyPI)
- Feb 25, 2023
Malicious code in esqlibkill (PyPI)
- Feb 25, 2023
Malicious code in tppyinfo (PyPI)
- Feb 25, 2023
Malicious code in py-reget (PyPI)
- Feb 25, 2023
Malicious code in esqstudycpu (PyPI)
Page 178 of 232