Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,571 total in pypi · sorted newest first- Feb 23, 2023
Malicious code in superinfo (PyPI)
- Feb 23, 2023
Malicious code in pipram (PyPI)
- Feb 23, 2023
Malicious code in craftmine (PyPI)
- Feb 23, 2023
Malicious code in guilib (PyPI)
- Feb 23, 2023
Malicious code in adtool (PyPI)
- Feb 23, 2023
Malicious code in vmmine (PyPI)
- Feb 23, 2023
Malicious code in pywpy (PyPI)
- Feb 23, 2023
Malicious code in loadget (PyPI)
- Feb 23, 2023
Malicious code in guimine (PyPI)
- Feb 23, 2023
Malicious code in grandget (PyPI)
- Feb 23, 2023
Malicious code in cpumc (PyPI)
- Feb 23, 2023
Malicious code in candylib (PyPI)
- Feb 23, 2023
Malicious code in regui (PyPI)
- Feb 23, 2023
Malicious code in toolcpu (PyPI)
- Feb 23, 2023
Malicious code in libload (PyPI)
- Feb 23, 2023
Malicious code in pipload (PyPI)
- Feb 23, 2023
Malicious code in cputool (PyPI)
- Feb 23, 2023
Malicious code in httpurl (PyPI)
- Feb 23, 2023
Malicious code in ultratool (PyPI)
- Feb 23, 2023
Malicious code in craftpyw (PyPI)
- Feb 23, 2023
Malicious code in vmlib (PyPI)
- Feb 23, 2023
Malicious code in ramcandy (PyPI)
- Feb 23, 2023
Malicious code in libget (PyPI)
- Feb 23, 2023
Malicious code in gamepip (PyPI)
- Feb 23, 2023
Malicious code in craftpip (PyPI)
- Feb 23, 2023
Malicious code in urlram (PyPI)
- Feb 23, 2023
Malicious code in pywmine (PyPI)
- Feb 23, 2023
Malicious code in posttool (PyPI)
- Feb 23, 2023
Malicious code in piphttp (PyPI)
- Feb 23, 2023
Malicious code in httpcandy (PyPI)
- Feb 23, 2023
Malicious code in candymine (PyPI)
- Feb 23, 2023
Malicious code in urlgame (PyPI)
- Feb 23, 2023
Malicious code in supergui (PyPI)
- Feb 23, 2023
Malicious code in grandpost (PyPI)
- Feb 23, 2023
Malicious code in mcvm (PyPI)
- Feb 23, 2023
Malicious code in postcraft (PyPI)
- Feb 23, 2023
Malicious code in minepyw (PyPI)
- Feb 23, 2023
Malicious code in httpcpu (PyPI)
- Feb 23, 2023
Malicious code in pywcraft (PyPI)
- Feb 23, 2023
Malicious code in loadcraft (PyPI)
- Feb 23, 2023
Malicious code in craftvm (PyPI)
- Feb 23, 2023
Malicious code in urlre (PyPI)
- Feb 23, 2023
Malicious code in rehttp (PyPI)
- Feb 23, 2023
Malicious code in mccandy (PyPI)
- Feb 23, 2023
Malicious code in mcload (PyPI)
- Feb 23, 2023
Malicious code in vmcandy (PyPI)
- Feb 23, 2023
Malicious code in ultrapip (PyPI)
- Feb 23, 2023
Malicious code in pipsuper (PyPI)
- Feb 23, 2023
Malicious code in craftload (PyPI)
- Feb 23, 2023
Malicious code in pipgrand (PyPI)
Page 207 of 232