Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 26, 2023
Malicious code in py-splitreplacestring (PyPI)
- Feb 26, 2023
Malicious code in py-randmaskstudy (PyPI)
- Feb 26, 2023
Malicious code in py-ramrandgrand (PyPI)
- Feb 26, 2023
Malicious code in py-pullproofkill (PyPI)
- Feb 26, 2023
Malicious code in py-nvidiarandvirtual (PyPI)
- Feb 26, 2023
Malicious code in py-craftadcandy (PyPI)
- Feb 26, 2023
Malicious code in libvergethacked (PyPI)
- Feb 26, 2023
Malicious code in libultraultracc (PyPI)
- Feb 26, 2023
Malicious code in esqosintcandycc (PyPI)
- Feb 26, 2023
Malicious code in tpurlpaypalcraft (PyPI)
- Feb 26, 2023
Malicious code in tppiphttpstring (PyPI)
- Feb 26, 2023
Malicious code in tpmineloadtool (PyPI)
- Feb 26, 2023
Malicious code in selfvisaosintreplace (PyPI)
- Feb 26, 2023
Malicious code in selfguiloadget (PyPI)
- Feb 26, 2023
Malicious code in py-urlcandyosint (PyPI)
- Feb 26, 2023
Malicious code in py-pymcosint (PyPI)
- Feb 26, 2023
Malicious code in liburlsplitpush (PyPI)
- Feb 26, 2023
Malicious code in esqrevmgrand (PyPI)
- Feb 26, 2023
Malicious code in esqreplacegrandpyw (PyPI)
- Feb 26, 2023
Malicious code in tphackedcontroled (PyPI)
- Feb 26, 2023
Malicious code in tpcpuedosint (PyPI)
- Feb 26, 2023
Malicious code in tpcandycontrolpush (PyPI)
- Feb 26, 2023
Malicious code in selfstudynvidiapep (PyPI)
- Feb 26, 2023
Malicious code in selfcvcvmask (PyPI)
- Feb 26, 2023
Malicious code in selfccpullint (PyPI)
- Feb 26, 2023
Malicious code in py-killhackedpep (PyPI)
- Feb 26, 2023
Malicious code in esqultrareplacecandy (PyPI)
- Feb 26, 2023
Malicious code in esqstudypongcandy (PyPI)
- Feb 26, 2023
Malicious code in esqpaypalgamemc (PyPI)
- Feb 26, 2023
Malicious code in esqgrandminetool (PyPI)
- Feb 26, 2023
Malicious code in tppaypalrandomurl (PyPI)
- Feb 26, 2023
Malicious code in tploadloadosint (PyPI)
- Feb 26, 2023
Malicious code in py-libhydraed (PyPI)
- Feb 26, 2023
Malicious code in libvirtualpostcc (PyPI)
- Feb 26, 2023
Malicious code in liblibsuperad (PyPI)
- Feb 26, 2023
Malicious code in libcraftloadurl (PyPI)
- Feb 26, 2023
Malicious code in esqvisaurlstring (PyPI)
- Feb 26, 2023
Malicious code in esqvisamaskpyw (PyPI)
- Feb 26, 2023
Malicious code in tpnvidiarandsplit (PyPI)
- Feb 26, 2023
Malicious code in tpencodecandyosint (PyPI)
- Feb 26, 2023
Malicious code in selfintelsplitlgtb (PyPI)
- Feb 26, 2023
Malicious code in py-splitvercraft (PyPI)
- Feb 26, 2023
Malicious code in esqverccpush (PyPI)
- Feb 26, 2023
Malicious code in esqinfohttppush (PyPI)
- Feb 26, 2023
Malicious code in tplibhydrahacked (PyPI)
- Feb 26, 2023
Malicious code in selfvirtualinfoencode (PyPI)
- Feb 26, 2023
Malicious code in selfcraftcontrolload (PyPI)
- Feb 26, 2023
Malicious code in py-pullposted (PyPI)
- Feb 26, 2023
Malicious code in libmcrever (PyPI)
- Feb 26, 2023
Malicious code in esqproofurlstudy (PyPI)
Page 384 of 479