Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,571 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in studylib (PyPI)
- Feb 25, 2023
Malicious code in lgtbre (PyPI)
- Feb 25, 2023
Malicious code in killhydra (PyPI)
- Feb 25, 2023
Malicious code in hackedpost (PyPI)
- Feb 25, 2023
Malicious code in edcv (PyPI)
- Feb 25, 2023
Malicious code in postpost (PyPI)
- Feb 25, 2023
Malicious code in loadrandom (PyPI)
- Feb 25, 2023
Malicious code in hackedpush (PyPI)
- Feb 25, 2023
Malicious code in randpaypal (PyPI)
- Feb 25, 2023
Malicious code in intint (PyPI)
- Feb 25, 2023
Malicious code in gamestr (PyPI)
- Feb 25, 2023
Malicious code in gameintel (PyPI)
- Feb 25, 2023
Malicious code in visapush (PyPI)
- Feb 25, 2023
Malicious code in replacecpu (PyPI)
- Feb 25, 2023
Malicious code in osintvm (PyPI)
- Feb 25, 2023
Malicious code in mineproof (PyPI)
- Feb 25, 2023
Malicious code in cvint (PyPI)
- Feb 25, 2023
Malicious code in ultrarand (PyPI)
- Feb 25, 2023
Malicious code in pushvm (PyPI)
- Feb 25, 2023
Malicious code in strram (PyPI)
- Feb 25, 2023
Malicious code in pywosint (PyPI)
- Feb 25, 2023
Malicious code in hydrarand (PyPI)
- Feb 25, 2023
Malicious code in verpong (PyPI)
- Feb 25, 2023
Malicious code in hackedcraft (PyPI)
- Feb 25, 2023
Malicious code in pongpip (PyPI)
- Feb 25, 2023
Malicious code in candypong (PyPI)
- Feb 25, 2023
Malicious code in randget (PyPI)
- Feb 25, 2023
Malicious code in lgtbultra (PyPI)
- Feb 25, 2023
Malicious code in stringgrand (PyPI)
- Feb 25, 2023
Malicious code in intpaypal (PyPI)
- Feb 25, 2023
Malicious code in mineintel (PyPI)
- Feb 25, 2023
Malicious code in studyload (PyPI)
- Feb 25, 2023
Malicious code in pongpush (PyPI)
- Feb 25, 2023
Malicious code in randgui (PyPI)
- Feb 25, 2023
Malicious code in grandkill (PyPI)
- Feb 25, 2023
Malicious code in vervisa (PyPI)
- Feb 25, 2023
Malicious code in pywint (PyPI)
- Feb 25, 2023
Malicious code in adpaypal (PyPI)
- Feb 24, 2023
Malicious code in proofcv (PyPI)
- Feb 24, 2023
Malicious code in getcandy (PyPI)
- Feb 24, 2023
Malicious code in visatool (PyPI)
- Feb 24, 2023
Malicious code in loadhttp (PyPI)
- Feb 24, 2023
Malicious code in proofpy (PyPI)
- Feb 24, 2023
Malicious code in advirtual (PyPI)
- Feb 24, 2023
Malicious code in hydrahydra (PyPI)
- Feb 24, 2023
Malicious code in proofcandy (PyPI)
- Feb 24, 2023
Malicious code in minemc (PyPI)
- Feb 24, 2023
Malicious code in urlvisa (PyPI)
- Feb 24, 2023
Malicious code in hydratool (PyPI)
- Feb 24, 2023
Malicious code in grandmine (PyPI)
Page 196 of 232