Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in esqlibtoolhttp (PyPI)
- Feb 26, 2023
Malicious code in selfcraftsuperhacked (PyPI)
- Feb 26, 2023
Malicious code in py-studyproofver (PyPI)
- Feb 26, 2023
Malicious code in libcandykillosint (PyPI)
- Feb 26, 2023
Malicious code in tpinfoencodeget (PyPI)
- Feb 26, 2023
Malicious code in tpedultraintel (PyPI)
- Feb 26, 2023
Malicious code in selfstudyintstudy (PyPI)
- Feb 26, 2023
Malicious code in selfloadtoolcc (PyPI)
- Feb 26, 2023
Malicious code in py-postproofmc (PyPI)
- Feb 26, 2023
Malicious code in py-paypalcandyping (PyPI)
- Feb 26, 2023
Malicious code in esqvmverpep (PyPI)
- Feb 26, 2023
Malicious code in esqtoolpoststr (PyPI)
- Feb 26, 2023
Malicious code in esqrenvidiaad (PyPI)
- Feb 26, 2023
Malicious code in esqhackednvidiamine (PyPI)
- Feb 26, 2023
Malicious code in tppoststrsuper (PyPI)
- Feb 26, 2023
Malicious code in tpcraftcandypyw (PyPI)
- Feb 26, 2023
Malicious code in selfedintsuper (PyPI)
- Feb 26, 2023
Malicious code in py-studykillproof (PyPI)
- Feb 26, 2023
Malicious code in py-pingintelosint (PyPI)
- Feb 26, 2023
Malicious code in py-pepreplacereplace (PyPI)
- Feb 26, 2023
Malicious code in py-intelhackedpyw (PyPI)
- Feb 26, 2023
Malicious code in esqvmgetram (PyPI)
- Feb 26, 2023
Malicious code in esqpephydrapaypal (PyPI)
- Feb 26, 2023
Malicious code in esqmaskcraftnvidia (PyPI)
- Feb 26, 2023
Malicious code in esqkillurlcraft (PyPI)
- Feb 26, 2023
Malicious code in esqcvultralgtb (PyPI)
- Feb 26, 2023
Malicious code in tpurlpullpaypal (PyPI)
- Feb 26, 2023
Malicious code in tpultravmpy (PyPI)
- Feb 26, 2023
Malicious code in tppullmcreplace (PyPI)
- Feb 26, 2023
Malicious code in tpkillproofpip (PyPI)
- Feb 26, 2023
Malicious code in selfpywgamesuper (PyPI)
- Feb 26, 2023
Malicious code in selfpostguihttp (PyPI)
- Feb 26, 2023
Malicious code in selfminepywurl (PyPI)
- Feb 26, 2023
Malicious code in selfcontrolhttppip (PyPI)
- Feb 26, 2023
Malicious code in py-vmkillencode (PyPI)
- Feb 26, 2023
Malicious code in py-intcputool (PyPI)
- Feb 26, 2023
Malicious code in py-candyproofstring (PyPI)
- Feb 26, 2023
Malicious code in librandomcrafthydra (PyPI)
- Feb 26, 2023
Malicious code in libcandycraftcontrol (PyPI)
- Feb 26, 2023
Malicious code in esqstringsupergui (PyPI)
- Feb 26, 2023
Malicious code in tppywproofstr (PyPI)
- Feb 26, 2023
Malicious code in tpminegetintel (PyPI)
- Feb 26, 2023
Malicious code in tpguiverpyw (PyPI)
- Feb 26, 2023
Malicious code in selfvergrandstr (PyPI)
- Feb 26, 2023
Malicious code in selfpywloadmine (PyPI)
- Feb 26, 2023
Malicious code in selfcpupingcc (PyPI)
- Feb 26, 2023
Malicious code in py-adreplaceinfo (PyPI)
- Feb 26, 2023
Malicious code in libmcpywcontrol (PyPI)
- Feb 26, 2023
Malicious code in libintlibmc (PyPI)
- Feb 26, 2023
Malicious code in esqloadcved (PyPI)
Page 378 of 479