Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libproofpong (PyPI)
- Feb 25, 2023
Malicious code in selfhydramask (PyPI)
- Feb 25, 2023
Malicious code in py-getcandy (PyPI)
- Feb 25, 2023
Malicious code in tppepsplit (PyPI)
- Feb 25, 2023
Malicious code in selflibcv (PyPI)
- Feb 25, 2023
Malicious code in tpvmpy (PyPI)
- Feb 25, 2023
Malicious code in py-grandstr (PyPI)
- Feb 25, 2023
Malicious code in libosintkill (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpush (PyPI)
- Feb 25, 2023
Malicious code in selfpostmc (PyPI)
- Feb 25, 2023
Malicious code in libvisainfo (PyPI)
- Feb 25, 2023
Malicious code in librandompush (PyPI)
- Feb 25, 2023
Malicious code in tploadpep (PyPI)
- Feb 25, 2023
Malicious code in tpgamepip (PyPI)
- Feb 25, 2023
Malicious code in py-rere (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalhydra (PyPI)
- Feb 25, 2023
Malicious code in selfultracraft (PyPI)
- Feb 25, 2023
Malicious code in selfinfoencode (PyPI)
- Feb 25, 2023
Malicious code in selfhackedencode (PyPI)
- Feb 25, 2023
Malicious code in selfcvhttp (PyPI)
- Feb 25, 2023
Malicious code in py-adget (PyPI)
- Feb 25, 2023
Malicious code in esqlgtbad (PyPI)
- Feb 25, 2023
Malicious code in esqadrandom (PyPI)
- Feb 25, 2023
Malicious code in selfmasksuper (PyPI)
- Feb 25, 2023
Malicious code in selfcpugrand (PyPI)
- Feb 25, 2023
Malicious code in libsuperint (PyPI)
- Feb 25, 2023
Malicious code in libultrastring (PyPI)
- Feb 25, 2023
Malicious code in libhttpcc (PyPI)
- Feb 25, 2023
Malicious code in esqvirtualpush (PyPI)
- Feb 25, 2023
Malicious code in esqrere (PyPI)
- Feb 25, 2023
Malicious code in tpgrandmask (PyPI)
- Feb 25, 2023
Malicious code in py-maskhacked (PyPI)
- Feb 25, 2023
Malicious code in libosinturl (PyPI)
- Feb 25, 2023
Malicious code in esqrandram (PyPI)
- Feb 25, 2023
Malicious code in selfhttppy (PyPI)
- Feb 25, 2023
Malicious code in selfgamepost (PyPI)
- Feb 25, 2023
Malicious code in py-pushget (PyPI)
- Feb 25, 2023
Malicious code in py-killinfo (PyPI)
- Feb 25, 2023
Malicious code in tpurllib (PyPI)
- Feb 25, 2023
Malicious code in libtoolinfo (PyPI)
- Feb 25, 2023
Malicious code in libstrad (PyPI)
- Feb 25, 2023
Malicious code in libcpuram (PyPI)
- Feb 25, 2023
Malicious code in esqsplitpy (PyPI)
- Feb 25, 2023
Malicious code in selflgtbpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfcraftint (PyPI)
- Feb 25, 2023
Malicious code in esqintelping (PyPI)
- Feb 25, 2023
Malicious code in esqgetintel (PyPI)
- Feb 25, 2023
Malicious code in tpcraftcandy (PyPI)
- Feb 25, 2023
Malicious code in py-grandpep (PyPI)
- Feb 25, 2023
Malicious code in selfpywgame (PyPI)
Page 182 of 232