Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in esqedtoolpull (PyPI)
- Feb 27, 2023
Malicious code in tpminesuperpip (PyPI)
- Feb 27, 2023
Malicious code in selfvmadver (PyPI)
- Feb 27, 2023
Malicious code in selfmaskhydravm (PyPI)
- Feb 27, 2023
Malicious code in py-loadlibgrand (PyPI)
- Feb 27, 2023
Malicious code in libencodegrandhttp (PyPI)
- Feb 27, 2023
Malicious code in tpvisalgtbcv (PyPI)
- Feb 27, 2023
Malicious code in py-pywcclgtb (PyPI)
- Feb 27, 2023
Malicious code in libpingpykill (PyPI)
- Feb 27, 2023
Malicious code in esqcontrolpingrandom (PyPI)
- Feb 27, 2023
Malicious code in tpcpupeppaypal (PyPI)
- Feb 27, 2023
Malicious code in py-killkillvirtual (PyPI)
- Feb 27, 2023
Malicious code in esqadlgtbvisa (PyPI)
- Feb 27, 2023
Malicious code in selfadmaskmask (PyPI)
- Feb 27, 2023
Malicious code in py-urlpostosint (PyPI)
- Feb 27, 2023
Malicious code in libramramram (PyPI)
- Feb 27, 2023
Malicious code in selfintsuperram (PyPI)
- Feb 27, 2023
Malicious code in libinfolibre (PyPI)
- Feb 27, 2023
Malicious code in libhydratooled (PyPI)
- Feb 27, 2023
Malicious code in tpadgrandrandom (PyPI)
- Feb 27, 2023
Malicious code in selfcvvisaping (PyPI)
- Feb 27, 2023
Malicious code in libmccchacked (PyPI)
- Feb 27, 2023
Malicious code in libguiinfosuper (PyPI)
- Feb 27, 2023
Malicious code in tppywlibpep (PyPI)
- Feb 27, 2023
Malicious code in tpcontrolosintcv (PyPI)
- Feb 27, 2023
Malicious code in libpaypalcontrolultra (PyPI)
- Feb 27, 2023
Malicious code in selfkillcontrollib (PyPI)
- Feb 27, 2023
Malicious code in py-pingpipkill (PyPI)
- Feb 27, 2023
Malicious code in esqpullinfoload (PyPI)
- Feb 27, 2023
Malicious code in liburlcontrolpull (PyPI)
- Feb 27, 2023
Malicious code in tprecraftvisa (PyPI)
- Feb 27, 2023
Malicious code in libcandyretool (PyPI)
- Feb 27, 2023
Malicious code in esqadhackedosint (PyPI)
- Feb 27, 2023
Malicious code in tpstudyproofhttp (PyPI)
- Feb 27, 2023
Malicious code in selfvermaskpush (PyPI)
- Feb 27, 2023
Malicious code in py-raminteled (PyPI)
- Feb 27, 2023
Malicious code in py-mcedcraft (PyPI)
- Feb 27, 2023
Malicious code in libvirtualnvidiamask (PyPI)
- Feb 27, 2023
Malicious code in esqvirtualgetmc (PyPI)
- Feb 27, 2023
Malicious code in esqinfokillinfo (PyPI)
- Feb 27, 2023
Malicious code in tprandpymask (PyPI)
- Feb 27, 2023
Malicious code in tppeppostreplace (PyPI)
- Feb 27, 2023
Malicious code in tpcontrolvmpost (PyPI)
- Feb 27, 2023
Malicious code in selfnvidiamccandy (PyPI)
- Feb 27, 2023
Malicious code in selfencodepywget (PyPI)
- Feb 27, 2023
Malicious code in py-ccvmpy (PyPI)
- Feb 27, 2023
Malicious code in esqpongpaypalnvidia (PyPI)
- Feb 27, 2023
Malicious code in esqkillramed (PyPI)
- Feb 27, 2023
Malicious code in esqinthackednvidia (PyPI)
- Feb 27, 2023
Malicious code in esqintencodecontrol (PyPI)
Page 374 of 479