Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,571 total in pypi · sorted newest first- Feb 23, 2023
Malicious code in pipcraft (PyPI)
- Feb 23, 2023
Malicious code in loadvm (PyPI)
- Feb 23, 2023
Malicious code in infomc (PyPI)
- Feb 23, 2023
Malicious code in adhttp (PyPI)
- Feb 23, 2023
Malicious code in tooltool (PyPI)
- Feb 23, 2023
Malicious code in remine (PyPI)
- Feb 23, 2023
Malicious code in pygrand (PyPI)
- Feb 23, 2023
Malicious code in candycraft (PyPI)
- Feb 23, 2023
Malicious code in loadcpu (PyPI)
- Feb 23, 2023
Malicious code in ultracandy (PyPI)
- Feb 23, 2023
Malicious code in pippost (PyPI)
- Feb 23, 2023
Malicious code in candypost (PyPI)
- Feb 23, 2023
Malicious code in admine (PyPI)
- Feb 23, 2023
Malicious code in supermc (PyPI)
- Feb 23, 2023
Malicious code in loadload (PyPI)
- Feb 23, 2023
Malicious code in toolpost (PyPI)
- Feb 23, 2023
Malicious code in postpip (PyPI)
- Feb 23, 2023
Malicious code in vmpip (PyPI)
- Feb 23, 2023
Malicious code in vmgrand (PyPI)
- Feb 23, 2023
Malicious code in infohttp (PyPI)
- Feb 23, 2023
Malicious code in httppost (PyPI)
- Feb 23, 2023
Malicious code in supercraft (PyPI)
- Feb 23, 2023
Malicious code in reram (PyPI)
- Feb 23, 2023
Malicious code in superhttp (PyPI)
- Feb 23, 2023
Malicious code in ramgame (PyPI)
- Feb 23, 2023
Malicious code in urlsuper (PyPI)
- Feb 23, 2023
Malicious code in postram (PyPI)
- Feb 23, 2023
Malicious code in httpmine (PyPI)
- Feb 23, 2023
Malicious code in ultracraft (PyPI)
- Feb 23, 2023
Malicious code in recpu (PyPI)
- Feb 23, 2023
Malicious code in mcpost (PyPI)
- Feb 23, 2023
Malicious code in minead (PyPI)
- Feb 23, 2023
Malicious code in ramgui (PyPI)
- Feb 23, 2023
Malicious code in pycandy (PyPI)
- Feb 23, 2023
Malicious code in ultrainfo (PyPI)
- Feb 23, 2023
Malicious code in urlhttp (PyPI)
- Feb 23, 2023
Malicious code in ramvm (PyPI)
- Feb 23, 2023
Malicious code in cpuvm (PyPI)
- Feb 23, 2023
Malicious code in postget (PyPI)
- Feb 23, 2023
Malicious code in ramre (PyPI)
- Feb 23, 2023
Malicious code in cpure (PyPI)
- Feb 23, 2023
Malicious code in ultrasuper (PyPI)
- Feb 23, 2023
Malicious code in supermine (PyPI)
- Feb 23, 2023
Malicious code in pywpost (PyPI)
- Feb 23, 2023
Malicious code in infosuper (PyPI)
- Feb 23, 2023
Malicious code in posturl (PyPI)
- Feb 23, 2023
Malicious code in libinfo (PyPI)
- Feb 23, 2023
Malicious code in grandad (PyPI)
- Feb 23, 2023
Malicious code in mchttp (PyPI)
- Feb 23, 2023
Malicious code in candyinfo (PyPI)
Page 208 of 232