Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,581 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-ultracc (PyPI)
- Feb 25, 2023
Malicious code in py-craftstr (PyPI)
- Feb 25, 2023
Malicious code in libmcpep (PyPI)
- Feb 25, 2023
Malicious code in esqpingpost (PyPI)
- Feb 25, 2023
Malicious code in tpponglib (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualhydra (PyPI)
- Feb 25, 2023
Malicious code in selfmaskcpu (PyPI)
- Feb 25, 2023
Malicious code in libkillmc (PyPI)
- Feb 25, 2023
Malicious code in esqpyhttp (PyPI)
- Feb 25, 2023
Malicious code in esqminelib (PyPI)
- Feb 25, 2023
Malicious code in selfstrkill (PyPI)
- Feb 25, 2023
Malicious code in py-grandvirtual (PyPI)
- Feb 25, 2023
Malicious code in libguigrand (PyPI)
- Feb 25, 2023
Malicious code in esqvisapyw (PyPI)
- Feb 25, 2023
Malicious code in esqrandomintel (PyPI)
- Feb 25, 2023
Malicious code in py-hackedreplace (PyPI)
- Feb 25, 2023
Malicious code in libpullurl (PyPI)
- Feb 25, 2023
Malicious code in esqmced (PyPI)
- Feb 25, 2023
Malicious code in tpstrpush (PyPI)
- Feb 25, 2023
Malicious code in py-mcrandom (PyPI)
- Feb 25, 2023
Malicious code in py-gameping (PyPI)
- Feb 25, 2023
Malicious code in libpostint (PyPI)
- Feb 25, 2023
Malicious code in libkillping (PyPI)
- Feb 25, 2023
Malicious code in esqvmpep (PyPI)
- Feb 25, 2023
Malicious code in py-randvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-intinfo (PyPI)
- Feb 25, 2023
Malicious code in libstrpong (PyPI)
- Feb 25, 2023
Malicious code in py-edproof (PyPI)
- Feb 25, 2023
Malicious code in esqultracc (PyPI)
- Feb 25, 2023
Malicious code in tppipgrand (PyPI)
- Feb 25, 2023
Malicious code in tpintpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqgeturl (PyPI)
- Feb 25, 2023
Malicious code in selfloadcpu (PyPI)
- Feb 25, 2023
Malicious code in py-intelget (PyPI)
- Feb 25, 2023
Malicious code in py-superre (PyPI)
- Feb 25, 2023
Malicious code in py-infopaypal (PyPI)
- Feb 25, 2023
Malicious code in py-virtuallib (PyPI)
- Feb 25, 2023
Malicious code in py-grandpyw (PyPI)
- Feb 25, 2023
Malicious code in esqinforandom (PyPI)
- Feb 25, 2023
Malicious code in tptoolmask (PyPI)
- Feb 25, 2023
Malicious code in tpsplitgui (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalvm (PyPI)
- Feb 25, 2023
Malicious code in py-supervisa (PyPI)
- Feb 25, 2023
Malicious code in py-edreplace (PyPI)
- Feb 25, 2023
Malicious code in libhydraint (PyPI)
- Feb 25, 2023
Malicious code in selfpepintel (PyPI)
- Feb 25, 2023
Malicious code in py-randad (PyPI)
- Feb 25, 2023
Malicious code in py-pepgrand (PyPI)
- Feb 25, 2023
Malicious code in py-httppull (PyPI)
- Feb 25, 2023
Malicious code in libpostpong (PyPI)
Page 185 of 232