Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqgettool (PyPI)
- Feb 25, 2023
Malicious code in tppyproof (PyPI)
- Feb 25, 2023
Malicious code in selftoolmask (PyPI)
- Feb 25, 2023
Malicious code in selfcpuinfo (PyPI)
- Feb 25, 2023
Malicious code in py-vmvm (PyPI)
- Feb 25, 2023
Malicious code in py-hackedurl (PyPI)
- Feb 25, 2023
Malicious code in libguiping (PyPI)
- Feb 25, 2023
Malicious code in tprecandy (PyPI)
- Feb 25, 2023
Malicious code in selfosintget (PyPI)
- Feb 25, 2023
Malicious code in py-guigrand (PyPI)
- Feb 25, 2023
Malicious code in libtoolstudy (PyPI)
- Feb 25, 2023
Malicious code in esqhttpinfo (PyPI)
- Feb 25, 2023
Malicious code in tpurlintel (PyPI)
- Feb 25, 2023
Malicious code in selfvergame (PyPI)
- Feb 25, 2023
Malicious code in py-postpull (PyPI)
- Feb 25, 2023
Malicious code in liburlurl (PyPI)
- Feb 25, 2023
Malicious code in esqrandultra (PyPI)
- Feb 25, 2023
Malicious code in tprandcandy (PyPI)
- Feb 25, 2023
Malicious code in selfreplacesplit (PyPI)
- Feb 25, 2023
Malicious code in py-ramhacked (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbrand (PyPI)
- Feb 25, 2023
Malicious code in libvmmc (PyPI)
- Feb 25, 2023
Malicious code in tppaypalsuper (PyPI)
- Feb 25, 2023
Malicious code in selfintsuper (PyPI)
- Feb 25, 2023
Malicious code in libhttpkill (PyPI)
- Feb 25, 2023
Malicious code in esqrandominfo (PyPI)
- Feb 25, 2023
Malicious code in esqproofproof (PyPI)
- Feb 25, 2023
Malicious code in esqkillstring (PyPI)
- Feb 25, 2023
Malicious code in tpvercontrol (PyPI)
- Feb 25, 2023
Malicious code in py-stringrandom (PyPI)
- Feb 25, 2023
Malicious code in py-killnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-httpencode (PyPI)
- Feb 25, 2023
Malicious code in libhackedcv (PyPI)
- Feb 25, 2023
Malicious code in py-repull (PyPI)
- Feb 25, 2023
Malicious code in libhackedstr (PyPI)
- Feb 25, 2023
Malicious code in esqstringnvidia (PyPI)
- Feb 25, 2023
Malicious code in tpultrainfo (PyPI)
- Feb 25, 2023
Malicious code in py-rever (PyPI)
- Feb 25, 2023
Malicious code in libreplacepong (PyPI)
- Feb 25, 2023
Malicious code in libintelram (PyPI)
- Feb 25, 2023
Malicious code in py-grandre (PyPI)
- Feb 25, 2023
Malicious code in libkillcandy (PyPI)
- Feb 25, 2023
Malicious code in selflgtbpep (PyPI)
- Feb 25, 2023
Malicious code in esqintelpush (PyPI)
- Feb 25, 2023
Malicious code in libreplaceintel (PyPI)
- Feb 25, 2023
Malicious code in selfmaskvisa (PyPI)
- Feb 25, 2023
Malicious code in py-randreplace (PyPI)
- Feb 25, 2023
Malicious code in py-hydramc (PyPI)
- Feb 25, 2023
Malicious code in libmaskver (PyPI)
- Feb 25, 2023
Malicious code in libcraftosint (PyPI)
Page 183 of 232