Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in esqadcvmc (PyPI)
- Feb 27, 2023
Malicious code in selfpostpywver (PyPI)
- Feb 27, 2023
Malicious code in selfosintrecandy (PyPI)
- Feb 27, 2023
Malicious code in py-supercandyreplace (PyPI)
- Feb 27, 2023
Malicious code in py-intedreplace (PyPI)
- Feb 27, 2023
Malicious code in libpostcpupaypal (PyPI)
- Feb 27, 2023
Malicious code in libedkillcraft (PyPI)
- Feb 27, 2023
Malicious code in esqtoolminemask (PyPI)
- Feb 27, 2023
Malicious code in esqencodetoolsuper (PyPI)
- Feb 27, 2023
Malicious code in tpstrposturl (PyPI)
- Feb 27, 2023
Malicious code in tpstrmaskpy (PyPI)
- Feb 27, 2023
Malicious code in py-osintgrandpush (PyPI)
- Feb 27, 2023
Malicious code in libnvidiacvmc (PyPI)
- Feb 27, 2023
Malicious code in esqguihttphydra (PyPI)
- Feb 27, 2023
Malicious code in tppullcpupull (PyPI)
- Feb 27, 2023
Malicious code in tppingloadgui (PyPI)
- Feb 27, 2023
Malicious code in tpcandyrandping (PyPI)
- Feb 27, 2023
Malicious code in selfverstrad (PyPI)
- Feb 27, 2023
Malicious code in py-adproofosint (PyPI)
- Feb 27, 2023
Malicious code in tprevmlib (PyPI)
- Feb 27, 2023
Malicious code in tppippingmc (PyPI)
- Feb 27, 2023
Malicious code in py-pushguire (PyPI)
- Feb 27, 2023
Malicious code in py-intpywhacked (PyPI)
- Feb 27, 2023
Malicious code in libvmpushpy (PyPI)
- Feb 27, 2023
Malicious code in libvercvint (PyPI)
- Feb 27, 2023
Malicious code in esqvisaminevm (PyPI)
- Feb 27, 2023
Malicious code in tpvirtualpullvm (PyPI)
- Feb 27, 2023
Malicious code in tpkillpipram (PyPI)
- Feb 27, 2023
Malicious code in libvisacandyver (PyPI)
- Feb 27, 2023
Malicious code in libreplacenvidiapost (PyPI)
- Feb 27, 2023
Malicious code in libloadpushvirtual (PyPI)
- Feb 27, 2023
Malicious code in selfsuperhttpsplit (PyPI)
- Feb 27, 2023
Malicious code in esqmaskkillcraft (PyPI)
- Feb 27, 2023
Malicious code in tposintosintrand (PyPI)
- Feb 27, 2023
Malicious code in selfminegrandkill (PyPI)
- Feb 27, 2023
Malicious code in py-virtualpywcraft (PyPI)
- Feb 27, 2023
Malicious code in py-rampaypalint (PyPI)
- Feb 27, 2023
Malicious code in selfhttpreplacestudy (PyPI)
- Feb 27, 2023
Malicious code in py-grandccultra (PyPI)
- Feb 27, 2023
Malicious code in esqpongkillmine (PyPI)
- Feb 27, 2023
Malicious code in esqsupercandyad (PyPI)
- Feb 27, 2023
Malicious code in esqsplitgrandvisa (PyPI)
- Feb 27, 2023
Malicious code in tppaypalproofre (PyPI)
- Feb 27, 2023
Malicious code in libvmloadpep (PyPI)
- Feb 27, 2023
Malicious code in libpepcpuad (PyPI)
- Feb 27, 2023
Malicious code in esqguipycc (PyPI)
- Feb 27, 2023
Malicious code in tppushcraftcpu (PyPI)
- Feb 27, 2023
Malicious code in tpstringverstudy (PyPI)
- Feb 27, 2023
Malicious code in selfverproofkill (PyPI)
- Feb 27, 2023
Malicious code in tplgtbpostre (PyPI)
Page 371 of 479