Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqpymask (PyPI)
- Feb 25, 2023
Malicious code in esqpepstudy (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualrandom (PyPI)
- Feb 25, 2023
Malicious code in tppongpy (PyPI)
- Feb 25, 2023
Malicious code in selfsplitultra (PyPI)
- Feb 25, 2023
Malicious code in py-hydrahacked (PyPI)
- Feb 25, 2023
Malicious code in py-cvsplit (PyPI)
- Feb 25, 2023
Malicious code in tpstudyvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpsplitstudy (PyPI)
- Feb 25, 2023
Malicious code in tphackedad (PyPI)
- Feb 25, 2023
Malicious code in selframproof (PyPI)
- Feb 25, 2023
Malicious code in esqhackedmask (PyPI)
- Feb 25, 2023
Malicious code in esqccre (PyPI)
- Feb 25, 2023
Malicious code in py-pongnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-edpush (PyPI)
- Feb 25, 2023
Malicious code in libintelcv (PyPI)
- Feb 25, 2023
Malicious code in libgamevisa (PyPI)
- Feb 25, 2023
Malicious code in py-paypalhttp (PyPI)
- Feb 25, 2023
Malicious code in libcontrolgui (PyPI)
- Feb 25, 2023
Malicious code in esqpullpep (PyPI)
- Feb 25, 2023
Malicious code in esqgrandpull (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualurl (PyPI)
- Feb 25, 2023
Malicious code in esqencodemask (PyPI)
- Feb 25, 2023
Malicious code in selfhttppep (PyPI)
- Feb 25, 2023
Malicious code in py-randommine (PyPI)
- Feb 25, 2023
Malicious code in selfguiad (PyPI)
- Feb 25, 2023
Malicious code in libvirtualpull (PyPI)
- Feb 25, 2023
Malicious code in selfpongencode (PyPI)
- Feb 25, 2023
Malicious code in selfcvvirtual (PyPI)
- Feb 25, 2023
Malicious code in libvmnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfpongcpu (PyPI)
- Feb 25, 2023
Malicious code in selfpingram (PyPI)
- Feb 25, 2023
Malicious code in py-visapip (PyPI)
- Feb 25, 2023
Malicious code in py-pushcc (PyPI)
- Feb 25, 2023
Malicious code in libedgui (PyPI)
- Feb 25, 2023
Malicious code in esqgrandpaypal (PyPI)
- Feb 25, 2023
Malicious code in tpguied (PyPI)
- Feb 25, 2023
Malicious code in selfstudyhydra (PyPI)
- Feb 25, 2023
Malicious code in selfgamesplit (PyPI)
- Feb 25, 2023
Malicious code in py-ultrarandom (PyPI)
- Feb 25, 2023
Malicious code in libstudystring (PyPI)
- Feb 25, 2023
Malicious code in libminekill (PyPI)
- Feb 25, 2023
Malicious code in tpstrcpu (PyPI)
- Feb 25, 2023
Malicious code in selfstringlib (PyPI)
- Feb 25, 2023
Malicious code in selframstring (PyPI)
- Feb 25, 2023
Malicious code in py-hydrapy (PyPI)
- Feb 25, 2023
Malicious code in libosintinfo (PyPI)
- Feb 25, 2023
Malicious code in esqosintpull (PyPI)
- Feb 25, 2023
Malicious code in selfpepvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-urlvm (PyPI)
Page 179 of 232