Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libcandystr (PyPI)
- Feb 25, 2023
Malicious code in tposintvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpmcvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpcandypong (PyPI)
- Feb 25, 2023
Malicious code in selfhackedlib (PyPI)
- Feb 25, 2023
Malicious code in py-httppong (PyPI)
- Feb 25, 2023
Malicious code in libsupervisa (PyPI)
- Feb 25, 2023
Malicious code in tppywstudy (PyPI)
- Feb 25, 2023
Malicious code in selfstrpyw (PyPI)
- Feb 25, 2023
Malicious code in py-studypaypal (PyPI)
- Feb 25, 2023
Malicious code in libkillstring (PyPI)
- Feb 25, 2023
Malicious code in esqguipong (PyPI)
- Feb 25, 2023
Malicious code in selfultramc (PyPI)
- Feb 25, 2023
Malicious code in libreplaceultra (PyPI)
- Feb 25, 2023
Malicious code in libmcmine (PyPI)
- Feb 25, 2023
Malicious code in libcpupep (PyPI)
- Feb 25, 2023
Malicious code in esqccvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpreplacecraft (PyPI)
- Feb 25, 2023
Malicious code in selfultrahydra (PyPI)
- Feb 25, 2023
Malicious code in selfproofint (PyPI)
- Feb 25, 2023
Malicious code in selfreplacevisa (PyPI)
- Feb 25, 2023
Malicious code in py-vernvidia (PyPI)
- Feb 25, 2023
Malicious code in py-pushcpu (PyPI)
- Feb 25, 2023
Malicious code in esqstrping (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualpush (PyPI)
- Feb 25, 2023
Malicious code in tprandping (PyPI)
- Feb 25, 2023
Malicious code in py-guisuper (PyPI)
- Feb 25, 2023
Malicious code in py-postmine (PyPI)
- Feb 25, 2023
Malicious code in libcvstring (PyPI)
- Feb 25, 2023
Malicious code in tpproofkill (PyPI)
- Feb 25, 2023
Malicious code in liburlrandom (PyPI)
- Feb 25, 2023
Malicious code in py-minenvidia (PyPI)
- Feb 25, 2023
Malicious code in libinfointel (PyPI)
- Feb 25, 2023
Malicious code in libpullcontrol (PyPI)
- Feb 25, 2023
Malicious code in esqlibstudy (PyPI)
- Feb 25, 2023
Malicious code in selflibreplace (PyPI)
- Feb 25, 2023
Malicious code in py-guipaypal (PyPI)
- Feb 25, 2023
Malicious code in esqtoolstr (PyPI)
- Feb 25, 2023
Malicious code in esqedsplit (PyPI)
- Feb 25, 2023
Malicious code in esqcontrolint (PyPI)
- Feb 25, 2023
Malicious code in tppushcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfurlultra (PyPI)
- Feb 25, 2023
Malicious code in selfencodecandy (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolstr (PyPI)
- Feb 25, 2023
Malicious code in libpostinfo (PyPI)
- Feb 25, 2023
Malicious code in libencodesuper (PyPI)
- Feb 25, 2023
Malicious code in esqosintnvidia (PyPI)
- Feb 25, 2023
Malicious code in esqgameram (PyPI)
- Feb 25, 2023
Malicious code in tpstrmask (PyPI)
- Feb 25, 2023
Malicious code in selflgtbcc (PyPI)
Page 184 of 232