Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in esqedpingproof (PyPI)
- Feb 27, 2023
Malicious code in selfvisavisacpu (PyPI)
- Feb 27, 2023
Malicious code in tpgetstudypy (PyPI)
- Feb 27, 2023
Malicious code in libramhydralib (PyPI)
- Feb 27, 2023
Malicious code in esqstudystudygrand (PyPI)
- Feb 27, 2023
Malicious code in esqsplitguiram (PyPI)
- Feb 27, 2023
Malicious code in tppullsuperhttp (PyPI)
- Feb 27, 2023
Malicious code in selfrandponglib (PyPI)
- Feb 27, 2023
Malicious code in libstrreplacecpu (PyPI)
- Feb 27, 2023
Malicious code in tpnvidiapephttp (PyPI)
- Feb 27, 2023
Malicious code in selfpingintelcandy (PyPI)
- Feb 27, 2023
Malicious code in libverhttpmine (PyPI)
- Feb 27, 2023
Malicious code in tploadpulllgtb (PyPI)
- Feb 27, 2023
Malicious code in esqpygamevirtual (PyPI)
- Feb 27, 2023
Malicious code in selfgrandpushad (PyPI)
- Feb 27, 2023
Malicious code in tptoolvmpaypal (PyPI)
- Feb 27, 2023
Malicious code in tppywcandyping (PyPI)
- Feb 27, 2023
Malicious code in tppullpostgame (PyPI)
- Feb 27, 2023
Malicious code in tppaypalvmget (PyPI)
- Feb 27, 2023
Malicious code in selftoolintelnvidia (PyPI)
- Feb 27, 2023
Malicious code in selfrandompyint (PyPI)
- Feb 27, 2023
Malicious code in selfkillsplitpy (PyPI)
- Feb 27, 2023
Malicious code in libkillencodeed (PyPI)
- Feb 27, 2023
Malicious code in esqgamestringvm (PyPI)
- Feb 27, 2023
Malicious code in tppushlibpyw (PyPI)
- Feb 27, 2023
Malicious code in tpcraftlgtbload (PyPI)
- Feb 27, 2023
Malicious code in selfverpulled (PyPI)
- Feb 27, 2023
Malicious code in selfreplacemchydra (PyPI)
- Feb 27, 2023
Malicious code in selfminepywgui (PyPI)
- Feb 27, 2023
Malicious code in selfloadccpull (PyPI)
- Feb 27, 2023
Malicious code in selfinfogetrand (PyPI)
- Feb 27, 2023
Malicious code in py-strmaskmine (PyPI)
- Feb 27, 2023
Malicious code in libstrultrapush (PyPI)
- Feb 27, 2023
Malicious code in esqloadpaypalad (PyPI)
- Feb 27, 2023
Malicious code in esqkillpepproof (PyPI)
- Feb 27, 2023
Malicious code in esqhttpgetmask (PyPI)
- Feb 27, 2023
Malicious code in tphackedpullpaypal (PyPI)
- Feb 27, 2023
Malicious code in selfpywintelgrand (PyPI)
- Feb 27, 2023
Malicious code in selfliburlvirtual (PyPI)
- Feb 27, 2023
Malicious code in selfgamepongcc (PyPI)
- Feb 27, 2023
Malicious code in selfencoderampost (PyPI)
- Feb 27, 2023
Malicious code in py-strkillcraft (PyPI)
- Feb 27, 2023
Malicious code in libedencodemine (PyPI)
- Feb 27, 2023
Malicious code in esqreplaceedlgtb (PyPI)
- Feb 27, 2023
Malicious code in esqmccpunvidia (PyPI)
- Feb 27, 2023
Malicious code in esqcraftpipget (PyPI)
- Feb 27, 2023
Malicious code in tpultrarandpost (PyPI)
- Feb 27, 2023
Malicious code in tprelgtbvm (PyPI)
- Feb 27, 2023
Malicious code in tppostguistring (PyPI)
- Feb 27, 2023
Malicious code in selfverosintstring (PyPI)
Page 369 of 479