Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in selfpywhydragui (PyPI)
- Feb 27, 2023
Malicious code in selfhackedrepong (PyPI)
- Feb 27, 2023
Malicious code in py-randnvidiapip (PyPI)
- Feb 27, 2023
Malicious code in py-mineencodeosint (PyPI)
- Feb 27, 2023
Malicious code in py-infokillpush (PyPI)
- Feb 27, 2023
Malicious code in py-httptoolstring (PyPI)
- Feb 27, 2023
Malicious code in libpongvisacpu (PyPI)
- Feb 27, 2023
Malicious code in esqpostgrandint (PyPI)
- Feb 27, 2023
Malicious code in esqcvnvidiapush (PyPI)
- Feb 27, 2023
Malicious code in selfvisavmgame (PyPI)
- Feb 27, 2023
Malicious code in selfinfoinfohydra (PyPI)
- Feb 27, 2023
Malicious code in py-virtualguipost (PyPI)
- Feb 27, 2023
Malicious code in py-randpepgrand (PyPI)
- Feb 27, 2023
Malicious code in py-pywmchydra (PyPI)
- Feb 27, 2023
Malicious code in py-pippycandy (PyPI)
- Feb 27, 2023
Malicious code in py-nvidiastringreplace (PyPI)
- Feb 27, 2023
Malicious code in libstringsplithttp (PyPI)
- Feb 27, 2023
Malicious code in libreplacemcultra (PyPI)
- Feb 27, 2023
Malicious code in esqhydraramhydra (PyPI)
- Feb 27, 2023
Malicious code in selfgrandpongcraft (PyPI)
- Feb 27, 2023
Malicious code in selfgameedultra (PyPI)
- Feb 27, 2023
Malicious code in py-ramurlencode (PyPI)
- Feb 27, 2023
Malicious code in py-postcandymc (PyPI)
- Feb 27, 2023
Malicious code in py-mcvergame (PyPI)
- Feb 27, 2023
Malicious code in libsplitvirtualload (PyPI)
- Feb 27, 2023
Malicious code in esqtoolgetnvidia (PyPI)
- Feb 27, 2023
Malicious code in esqcraftloadpost (PyPI)
- Feb 27, 2023
Malicious code in esqccguihydra (PyPI)
- Feb 27, 2023
Malicious code in tpproofsplitint (PyPI)
- Feb 27, 2023
Malicious code in tpmineguipong (PyPI)
- Feb 27, 2023
Malicious code in selfpingspliturl (PyPI)
- Feb 27, 2023
Malicious code in selfpingcrafttool (PyPI)
- Feb 27, 2023
Malicious code in py-visapongmask (PyPI)
- Feb 27, 2023
Malicious code in py-tooladcraft (PyPI)
- Feb 27, 2023
Malicious code in py-ramstrencode (PyPI)
- Feb 27, 2023
Malicious code in py-minepingsplit (PyPI)
- Feb 27, 2023
Malicious code in py-intelmcad (PyPI)
- Feb 27, 2023
Malicious code in libpepcandymc (PyPI)
- Feb 27, 2023
Malicious code in libnvidiacpustr (PyPI)
- Feb 27, 2023
Malicious code in selfrandompywosint (PyPI)
- Feb 27, 2023
Malicious code in py-toolpaypalhydra (PyPI)
- Feb 27, 2023
Malicious code in libosintultrapyw (PyPI)
- Feb 27, 2023
Malicious code in libcvcandycontrol (PyPI)
- Feb 27, 2023
Malicious code in tpgametoolcontrol (PyPI)
- Feb 27, 2023
Malicious code in tpcpumcsuper (PyPI)
- Feb 27, 2023
Malicious code in tpcandygrandpost (PyPI)
- Feb 27, 2023
Malicious code in selfvmvisahacked (PyPI)
- Feb 27, 2023
Malicious code in selfpaypaladvm (PyPI)
- Feb 27, 2023
Malicious code in libgrandpaypalget (PyPI)
- Feb 27, 2023
Malicious code in esqpaypalpephydra (PyPI)
Page 370 of 479