Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfpyhackedpush (PyPI)
- Feb 25, 2023
Malicious code in libpyosintinfo (PyPI)
- Feb 25, 2023
Malicious code in libnvidiavmad (PyPI)
- Feb 25, 2023
Malicious code in libinfoccgrand (PyPI)
- Feb 25, 2023
Malicious code in libencodestringver (PyPI)
- Feb 25, 2023
Malicious code in tppywccultra (PyPI)
- Feb 25, 2023
Malicious code in tpencodepywget (PyPI)
- Feb 25, 2023
Malicious code in selfhttppipsplit (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolhackedpaypal (PyPI)
- Feb 25, 2023
Malicious code in libultracrafted (PyPI)
- Feb 25, 2023
Malicious code in selfgrandpipcontrol (PyPI)
- Feb 25, 2023
Malicious code in libcvpiphttp (PyPI)
- Feb 25, 2023
Malicious code in tppongosintmine (PyPI)
- Feb 25, 2023
Malicious code in selfgrandintgui (PyPI)
- Feb 25, 2023
Malicious code in py-pushsplitver (PyPI)
- Feb 25, 2023
Malicious code in libpeppingpyw (PyPI)
- Feb 25, 2023
Malicious code in libgettooltool (PyPI)
- Feb 25, 2023
Malicious code in tpgamecandycandy (PyPI)
- Feb 25, 2023
Malicious code in selfverlgtbrand (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalsplited (PyPI)
- Feb 25, 2023
Malicious code in selfpullpywcandy (PyPI)
- Feb 25, 2023
Malicious code in selfhttpcvstr (PyPI)
- Feb 25, 2023
Malicious code in selfhydrahydrasplit (PyPI)
- Feb 25, 2023
Malicious code in libvisahackedvisa (PyPI)
- Feb 25, 2023
Malicious code in esqosintstudymine (PyPI)
- Feb 25, 2023
Malicious code in tpintelguicv (PyPI)
- Feb 25, 2023
Malicious code in esqpywrandomcc (PyPI)
- Feb 25, 2023
Malicious code in esqramlibed (PyPI)
- Feb 25, 2023
Malicious code in esqadvmpong (PyPI)
- Feb 25, 2023
Malicious code in tppullmaskinfo (PyPI)
- Feb 25, 2023
Malicious code in tploadcraftint (PyPI)
- Feb 25, 2023
Malicious code in tpkillcchacked (PyPI)
- Feb 25, 2023
Malicious code in selfintstudyhttp (PyPI)
- Feb 25, 2023
Malicious code in libpongsuperpip (PyPI)
- Feb 25, 2023
Malicious code in libgeturlrandom (PyPI)
- Feb 25, 2023
Malicious code in esqvisapingreplace (PyPI)
- Feb 25, 2023
Malicious code in esqvirtualvisaosint (PyPI)
- Feb 25, 2023
Malicious code in esqstudyvirtualver (PyPI)
- Feb 25, 2023
Malicious code in esqrandmaskpost (PyPI)
- Feb 25, 2023
Malicious code in esqpostinfostr (PyPI)
- Feb 25, 2023
Malicious code in tppushpingpy (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiagranded (PyPI)
- Feb 25, 2023
Malicious code in py-loadhydratool (PyPI)
- Feb 25, 2023
Malicious code in liburlnvidiapep (PyPI)
- Feb 25, 2023
Malicious code in libramguipull (PyPI)
- Feb 25, 2023
Malicious code in liblgtbstrsuper (PyPI)
- Feb 25, 2023
Malicious code in esqsupervisaultra (PyPI)
- Feb 25, 2023
Malicious code in tpreplacelgtbpull (PyPI)
- Feb 25, 2023
Malicious code in tpcandylgtbgame (PyPI)
- Feb 25, 2023
Malicious code in tpcandyedsplit (PyPI)
Page 387 of 479