Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-splitload (PyPI)
- Feb 25, 2023
Malicious code in libpostcandy (PyPI)
- Feb 25, 2023
Malicious code in tpgetosint (PyPI)
- Feb 25, 2023
Malicious code in py-encodeping (PyPI)
- Feb 25, 2023
Malicious code in libstringstr (PyPI)
- Feb 25, 2023
Malicious code in esqpippip (PyPI)
- Feb 25, 2023
Malicious code in esqpingint (PyPI)
- Feb 25, 2023
Malicious code in tpsuperpyw (PyPI)
- Feb 25, 2023
Malicious code in tpintelrandom (PyPI)
- Feb 25, 2023
Malicious code in py-intstring (PyPI)
- Feb 25, 2023
Malicious code in libloadram (PyPI)
- Feb 25, 2023
Malicious code in esqstringpong (PyPI)
- Feb 25, 2023
Malicious code in py-strrandom (PyPI)
- Feb 25, 2023
Malicious code in esqcvproof (PyPI)
- Feb 25, 2023
Malicious code in selfkilllgtb (PyPI)
- Feb 25, 2023
Malicious code in esqstringpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqpywencode (PyPI)
- Feb 25, 2023
Malicious code in esqpostcpu (PyPI)
- Feb 25, 2023
Malicious code in esqgamemask (PyPI)
- Feb 25, 2023
Malicious code in selfreplacereplace (PyPI)
- Feb 25, 2023
Malicious code in esqintelreplace (PyPI)
- Feb 25, 2023
Malicious code in tplgtbpull (PyPI)
- Feb 25, 2023
Malicious code in py-craftmine (PyPI)
- Feb 25, 2023
Malicious code in selfurlcraft (PyPI)
- Feb 25, 2023
Malicious code in tpgrandcontrol (PyPI)
- Feb 25, 2023
Malicious code in selframlgtb (PyPI)
- Feb 25, 2023
Malicious code in py-reencode (PyPI)
- Feb 25, 2023
Malicious code in esqgrandsuper (PyPI)
- Feb 25, 2023
Malicious code in tpstudyver (PyPI)
- Feb 25, 2023
Malicious code in selfsplitlib (PyPI)
- Feb 25, 2023
Malicious code in py-ponghacked (PyPI)
- Feb 25, 2023
Malicious code in libcpuvm (PyPI)
- Feb 25, 2023
Malicious code in tpramosint (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolint (PyPI)
- Feb 25, 2023
Malicious code in tpcandykill (PyPI)
- Feb 25, 2023
Malicious code in selfpingvisa (PyPI)
- Feb 25, 2023
Malicious code in selfencodesplit (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolrandom (PyPI)
- Feb 25, 2023
Malicious code in py-visastring (PyPI)
- Feb 25, 2023
Malicious code in libinfogrand (PyPI)
- Feb 25, 2023
Malicious code in selfinforand (PyPI)
- Feb 25, 2023
Malicious code in py-librandom (PyPI)
- Feb 25, 2023
Malicious code in py-craftstring (PyPI)
- Feb 25, 2023
Malicious code in esqccvisa (PyPI)
- Feb 25, 2023
Malicious code in selfreplacepong (PyPI)
- Feb 25, 2023
Malicious code in py-visaver (PyPI)
- Feb 25, 2023
Malicious code in py-intload (PyPI)
- Feb 25, 2023
Malicious code in py-ccpyw (PyPI)
- Feb 25, 2023
Malicious code in libverpep (PyPI)
- Feb 25, 2023
Malicious code in selfcvpull (PyPI)
Page 180 of 232