Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in tppostcandynvidia (PyPI)
- Feb 26, 2023
Malicious code in tpmaskmcpush (PyPI)
- Feb 26, 2023
Malicious code in tpgamegetnvidia (PyPI)
- Feb 26, 2023
Malicious code in selfpaypalloadpaypal (PyPI)
- Feb 26, 2023
Malicious code in py-stringpingpost (PyPI)
- Feb 26, 2023
Malicious code in py-randomsplitram (PyPI)
- Feb 26, 2023
Malicious code in py-paypalintellgtb (PyPI)
- Feb 26, 2023
Malicious code in libstringpostmask (PyPI)
- Feb 26, 2023
Malicious code in tpsuperosintmask (PyPI)
- Feb 26, 2023
Malicious code in tppinghydrainfo (PyPI)
- Feb 26, 2023
Malicious code in py-replaceedpong (PyPI)
- Feb 26, 2023
Malicious code in py-paypalgetmine (PyPI)
- Feb 26, 2023
Malicious code in libpushgetkill (PyPI)
- Feb 26, 2023
Malicious code in esqnvidiastringcv (PyPI)
- Feb 26, 2023
Malicious code in tpcvgrandhacked (PyPI)
- Feb 26, 2023
Malicious code in selftoolinfoint (PyPI)
- Feb 26, 2023
Malicious code in selfproofnvidiagrand (PyPI)
- Feb 26, 2023
Malicious code in py-prooflibhydra (PyPI)
- Feb 26, 2023
Malicious code in py-paypalvirtualcv (PyPI)
- Feb 26, 2023
Malicious code in esqstringpepcv (PyPI)
- Feb 26, 2023
Malicious code in selfrandomstrad (PyPI)
- Feb 26, 2023
Malicious code in py-toolpywnvidia (PyPI)
- Feb 26, 2023
Malicious code in py-lgtbosintload (PyPI)
- Feb 26, 2023
Malicious code in libvmpostmask (PyPI)
- Feb 26, 2023
Malicious code in tpednvidiakill (PyPI)
- Feb 26, 2023
Malicious code in libvmstrpull (PyPI)
- Feb 26, 2023
Malicious code in esqccpullpush (PyPI)
- Feb 26, 2023
Malicious code in tpinfovirtualre (PyPI)
- Feb 26, 2023
Malicious code in selfencodepostmc (PyPI)
- Feb 26, 2023
Malicious code in libstudytoolosint (PyPI)
- Feb 26, 2023
Malicious code in tppostedping (PyPI)
- Feb 26, 2023
Malicious code in tphackedrandhydra (PyPI)
- Feb 26, 2023
Malicious code in esqpinghackedvisa (PyPI)
- Feb 26, 2023
Malicious code in tpproofmcultra (PyPI)
- Feb 26, 2023
Malicious code in libreplacepywpip (PyPI)
- Feb 26, 2023
Malicious code in selfpeppongload (PyPI)
- Feb 26, 2023
Malicious code in py-intcandyintel (PyPI)
- Feb 26, 2023
Malicious code in esqencodepostinfo (PyPI)
- Feb 26, 2023
Malicious code in py-pullcvrand (PyPI)
- Feb 26, 2023
Malicious code in esqpaypalvirtualmc (PyPI)
- Feb 26, 2023
Malicious code in selfgamepullad (PyPI)
- Feb 26, 2023
Malicious code in tpcpupingreplace (PyPI)
- Feb 26, 2023
Malicious code in selfosintcraftlib (PyPI)
- Feb 26, 2023
Malicious code in py-maskmaskload (PyPI)
- Feb 26, 2023
Malicious code in py-killstudygame (PyPI)
- Feb 26, 2023
Malicious code in libvisagamepep (PyPI)
- Feb 26, 2023
Malicious code in libcvgetsplit (PyPI)
- Feb 26, 2023
Malicious code in tppyreplacestr (PyPI)
- Feb 26, 2023
Malicious code in selfvisacontrolcraft (PyPI)
- Feb 26, 2023
Malicious code in selfpyosinthacked (PyPI)
Page 380 of 479