Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in esqencodepaypalpong (PyPI)
- Feb 26, 2023
Malicious code in selflgtbstringload (PyPI)
- Feb 26, 2023
Malicious code in py-replacepushinfo (PyPI)
- Feb 26, 2023
Malicious code in libcraftcandyrandom (PyPI)
- Feb 26, 2023
Malicious code in esqmaskcpuhacked (PyPI)
- Feb 26, 2023
Malicious code in selfpywpaypalultra (PyPI)
- Feb 26, 2023
Malicious code in selfloadedpy (PyPI)
- Feb 26, 2023
Malicious code in libcontrolinfostr (PyPI)
- Feb 26, 2023
Malicious code in esqosintvisaget (PyPI)
- Feb 26, 2023
Malicious code in tprandguilib (PyPI)
- Feb 26, 2023
Malicious code in tploadreplacestring (PyPI)
- Feb 26, 2023
Malicious code in tpcrafthydracandy (PyPI)
- Feb 26, 2023
Malicious code in selfhttpsplited (PyPI)
- Feb 26, 2023
Malicious code in libcontrolguipyw (PyPI)
- Feb 26, 2023
Malicious code in esqstringtoolint (PyPI)
- Feb 26, 2023
Malicious code in esqsplitpeptool (PyPI)
- Feb 26, 2023
Malicious code in tprampingload (PyPI)
- Feb 26, 2023
Malicious code in py-proofccmask (PyPI)
- Feb 26, 2023
Malicious code in libpeplgtbinfo (PyPI)
- Feb 26, 2023
Malicious code in selfmineultraram (PyPI)
- Feb 26, 2023
Malicious code in esqmaskpepget (PyPI)
- Feb 26, 2023
Malicious code in tppushcpucandy (PyPI)
- Feb 26, 2023
Malicious code in selfvisaurlpong (PyPI)
- Feb 26, 2023
Malicious code in tpvervmsplit (PyPI)
- Feb 26, 2023
Malicious code in tpreplacecrafthacked (PyPI)
- Feb 26, 2023
Malicious code in tppywultraint (PyPI)
- Feb 26, 2023
Malicious code in tphydraloadsuper (PyPI)
- Feb 26, 2023
Malicious code in tpedintload (PyPI)
- Feb 26, 2023
Malicious code in selfosinturlre (PyPI)
- Feb 26, 2023
Malicious code in selfnvidiareplaceload (PyPI)
- Feb 26, 2023
Malicious code in py-ultramcpyw (PyPI)
- Feb 26, 2023
Malicious code in py-strcvkill (PyPI)
- Feb 26, 2023
Malicious code in py-pepmcpaypal (PyPI)
- Feb 26, 2023
Malicious code in libstudyguipip (PyPI)
- Feb 26, 2023
Malicious code in liblgtbpostpaypal (PyPI)
- Feb 26, 2023
Malicious code in libcandyreplacecandy (PyPI)
- Feb 26, 2023
Malicious code in esqpostrandomstring (PyPI)
- Feb 26, 2023
Malicious code in tppyosintrand (PyPI)
- Feb 26, 2023
Malicious code in selfmineencodestr (PyPI)
- Feb 26, 2023
Malicious code in selfcpuintgame (PyPI)
- Feb 26, 2023
Malicious code in py-guimaskram (PyPI)
- Feb 26, 2023
Malicious code in py-encodeproofreplace (PyPI)
- Feb 26, 2023
Malicious code in py-candycontrollgtb (PyPI)
- Feb 26, 2023
Malicious code in libpyminelib (PyPI)
- Feb 26, 2023
Malicious code in liblgtbgrandvm (PyPI)
- Feb 26, 2023
Malicious code in esqinfointproof (PyPI)
- Feb 26, 2023
Malicious code in tpsupermcmc (PyPI)
- Feb 26, 2023
Malicious code in tposintadget (PyPI)
- Feb 26, 2023
Malicious code in tpencodeinteled (PyPI)
- Feb 26, 2023
Malicious code in py-virtualencodevirtual (PyPI)
Page 383 of 479