Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,571 total in pypi · sorted newest first- Feb 24, 2023
Malicious code in ultramine (PyPI)
- Feb 24, 2023
Malicious code in controlpip (PyPI)
- Feb 24, 2023
Malicious code in virtualurl (PyPI)
- Feb 24, 2023
Malicious code in guiinfo (PyPI)
- Feb 24, 2023
Malicious code in postcv (PyPI)
- Feb 24, 2023
Malicious code in mcgui (PyPI)
- Feb 24, 2023
Malicious code in ccvisa (PyPI)
- Feb 24, 2023
Malicious code in httphttp (PyPI)
- Feb 24, 2023
Malicious code in httpgame (PyPI)
- Feb 24, 2023
Malicious code in craftmask (PyPI)
- Feb 24, 2023
Malicious code in maskmask (PyPI)
- Feb 24, 2023
Malicious code in controlmask (PyPI)
- Feb 24, 2023
Malicious code in visamine (PyPI)
- Feb 24, 2023
Malicious code in urlcc (PyPI)
- Feb 24, 2023
Malicious code in maskload (PyPI)
- Feb 24, 2023
Malicious code in candycontrol (PyPI)
- Feb 24, 2023
Malicious code in postultra (PyPI)
- Feb 24, 2023
Malicious code in mcmask (PyPI)
- Feb 24, 2023
Malicious code in visagrand (PyPI)
- Feb 24, 2023
Malicious code in pepmask (PyPI)
- Feb 24, 2023
Malicious code in loadcv (PyPI)
- Feb 24, 2023
Malicious code in resuper (PyPI)
- Feb 24, 2023
Malicious code in mcvisa (PyPI)
- Feb 24, 2023
Malicious code in maskad (PyPI)
- Feb 24, 2023
Malicious code in controlhttp (PyPI)
- Feb 24, 2023
Malicious code in candyload (PyPI)
- Feb 24, 2023
Malicious code in visaget (PyPI)
- Feb 24, 2023
Malicious code in virtualcraft (PyPI)
- Feb 24, 2023
Malicious code in ultrapyw (PyPI)
- Feb 24, 2023
Malicious code in loadpep (PyPI)
- Feb 24, 2023
Malicious code in cpumask (PyPI)
- Feb 24, 2023
Malicious code in admask (PyPI)
- Feb 24, 2023
Malicious code in mcpip (PyPI)
- Feb 24, 2023
Malicious code in libmask (PyPI)
- Feb 24, 2023
Malicious code in infocraft (PyPI)
- Feb 24, 2023
Malicious code in gamevm (PyPI)
- Feb 24, 2023
Malicious code in cvtool (PyPI)
- Feb 24, 2023
Malicious code in minecv (PyPI)
- Feb 24, 2023
Malicious code in cvpyw (PyPI)
- Feb 24, 2023
Malicious code in cvpip (PyPI)
- Feb 24, 2023
Malicious code in httpvm (PyPI)
- Feb 24, 2023
Malicious code in craftultra (PyPI)
- Feb 24, 2023
Malicious code in controlsuper (PyPI)
- Feb 24, 2023
Malicious code in ccgame (PyPI)
- Feb 24, 2023
Malicious code in guimask (PyPI)
- Feb 24, 2023
Malicious code in gamemask (PyPI)
- Feb 24, 2023
Malicious code in candypep (PyPI)
- Feb 24, 2023
Malicious code in urlcpu (PyPI)
- Feb 24, 2023
Malicious code in pipvirtual (PyPI)
- Feb 24, 2023
Malicious code in minehttp (PyPI)
Page 205 of 232