Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 27, 2023
Malicious code in esqstrsplitmask (PyPI)
- Feb 27, 2023
Malicious code in esqproofrandommine (PyPI)
- Feb 27, 2023
Malicious code in tpedcpulib (PyPI)
- Feb 27, 2023
Malicious code in tppushverpull (PyPI)
- Feb 27, 2023
Malicious code in py-ccadsuper (PyPI)
- Feb 27, 2023
Malicious code in esqstringkillvisa (PyPI)
- Feb 27, 2023
Malicious code in tpkillpywcontrol (PyPI)
- Feb 27, 2023
Malicious code in py-replacepongpull (PyPI)
- Feb 27, 2023
Malicious code in selfcraftpepcontrol (PyPI)
- Feb 27, 2023
Malicious code in py-nvidiaproofnvidia (PyPI)
- Feb 27, 2023
Malicious code in tppingmaskpy (PyPI)
- Feb 27, 2023
Malicious code in tposintpyhydra (PyPI)
- Feb 27, 2023
Malicious code in selfvisacpuhydra (PyPI)
- Feb 27, 2023
Malicious code in libhttpadrand (PyPI)
- Feb 27, 2023
Malicious code in esqmaskvmrandom (PyPI)
- Feb 27, 2023
Malicious code in esqgamemaskultra (PyPI)
- Feb 27, 2023
Malicious code in esqpingverencode (PyPI)
- Feb 27, 2023
Malicious code in tpintelloadcc (PyPI)
- Feb 27, 2023
Malicious code in selfkillpinghydra (PyPI)
- Feb 27, 2023
Malicious code in tpencodepingre (PyPI)
- Feb 27, 2023
Malicious code in esqgetrepong (PyPI)
- Feb 27, 2023
Malicious code in esqadpostver (PyPI)
- Feb 27, 2023
Malicious code in tpvmcpustudy (PyPI)
- Feb 27, 2023
Malicious code in esqlgtbguistr (PyPI)
- Feb 26, 2023
Malicious code in tpvisasplitram (PyPI)
- Feb 26, 2023
Malicious code in py-vercraftget (PyPI)
- Feb 26, 2023
Malicious code in libstringgameload (PyPI)
- Feb 26, 2023
Malicious code in esqcvinfoed (PyPI)
- Feb 26, 2023
Malicious code in tppaypalpytool (PyPI)
- Feb 26, 2023
Malicious code in selfpippyreplace (PyPI)
- Feb 26, 2023
Malicious code in selfosintpostlib (PyPI)
- Feb 26, 2023
Malicious code in selflibencodetool (PyPI)
- Feb 26, 2023
Malicious code in libpushhttpget (PyPI)
- Feb 26, 2023
Malicious code in tppaypaledkill (PyPI)
- Feb 26, 2023
Malicious code in esqpywramint (PyPI)
- Feb 26, 2023
Malicious code in esqhttpvmurl (PyPI)
- Feb 26, 2023
Malicious code in tploadkillping (PyPI)
- Feb 26, 2023
Malicious code in selfmaskminehacked (PyPI)
- Feb 26, 2023
Malicious code in py-visapypost (PyPI)
- Feb 26, 2023
Malicious code in py-supergetnvidia (PyPI)
- Feb 26, 2023
Malicious code in libpywintnvidia (PyPI)
- Feb 26, 2023
Malicious code in libosintguiram (PyPI)
- Feb 26, 2023
Malicious code in py-pingpushultra (PyPI)
- Feb 26, 2023
Malicious code in libpushintpong (PyPI)
- Feb 26, 2023
Malicious code in libedpingcv (PyPI)
- Feb 26, 2023
Malicious code in tppywpullstr (PyPI)
- Feb 26, 2023
Malicious code in tpgetlibget (PyPI)
- Feb 26, 2023
Malicious code in liblgtbencodegrand (PyPI)
- Feb 26, 2023
Malicious code in esqsplitsplitver (PyPI)
- Feb 26, 2023
Malicious code in selfstudyintelcc (PyPI)
Page 377 of 479