Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tppongproofvm (PyPI)
- Feb 25, 2023
Malicious code in tpkillrandpull (PyPI)
- Feb 25, 2023
Malicious code in selfgrandvisagui (PyPI)
- Feb 25, 2023
Malicious code in libpongstringrand (PyPI)
- Feb 25, 2023
Malicious code in liblibpiprandom (PyPI)
- Feb 25, 2023
Malicious code in libhttpintelstr (PyPI)
- Feb 25, 2023
Malicious code in libcandyrandget (PyPI)
- Feb 25, 2023
Malicious code in esqinfohackedvisa (PyPI)
- Feb 25, 2023
Malicious code in esqcvccre (PyPI)
- Feb 25, 2023
Malicious code in tppushhackedint (PyPI)
- Feb 25, 2023
Malicious code in liblibpywre (PyPI)
- Feb 25, 2023
Malicious code in libhydracandymask (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiaverpull (PyPI)
- Feb 25, 2023
Malicious code in esqinfopongping (PyPI)
- Feb 25, 2023
Malicious code in esqhackedcvpyw (PyPI)
- Feb 25, 2023
Malicious code in tploadloadstudy (PyPI)
- Feb 25, 2023
Malicious code in selftoolmctool (PyPI)
- Feb 25, 2023
Malicious code in selfsplitreplaceosint (PyPI)
- Feb 25, 2023
Malicious code in selfpyhydralgtb (PyPI)
- Feb 25, 2023
Malicious code in selflgtbosintreplace (PyPI)
- Feb 25, 2023
Malicious code in libhydrasupercpu (PyPI)
- Feb 25, 2023
Malicious code in esqrepushvm (PyPI)
- Feb 25, 2023
Malicious code in esqkillloadload (PyPI)
- Feb 25, 2023
Malicious code in tpkillpywpost (PyPI)
- Feb 25, 2023
Malicious code in selframpipmc (PyPI)
- Feb 25, 2023
Malicious code in selfpywpipvirtual (PyPI)
- Feb 25, 2023
Malicious code in libpaypalurlstring (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpypost (PyPI)
- Feb 25, 2023
Malicious code in libgetvmed (PyPI)
- Feb 25, 2023
Malicious code in esqgetgetver (PyPI)
- Feb 25, 2023
Malicious code in tprandstudyget (PyPI)
- Feb 25, 2023
Malicious code in py-ponggrandnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-hackedultraget (PyPI)
- Feb 25, 2023
Malicious code in esqlibpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in tphydraencodevirtual (PyPI)
- Feb 25, 2023
Malicious code in selfhttpinfocv (PyPI)
- Feb 25, 2023
Malicious code in selfcpupongpush (PyPI)
- Feb 25, 2023
Malicious code in esqmasklgtbcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-pullreplaceinfo (PyPI)
- Feb 25, 2023
Malicious code in libverpipnvidia (PyPI)
- Feb 25, 2023
Malicious code in libvercvcpu (PyPI)
- Feb 25, 2023
Malicious code in libloadsuperpull (PyPI)
- Feb 25, 2023
Malicious code in esqpingstringram (PyPI)
- Feb 25, 2023
Malicious code in tpinfosplitinfo (PyPI)
- Feb 25, 2023
Malicious code in py-candyhttpad (PyPI)
- Feb 25, 2023
Malicious code in esqinfoinfoosint (PyPI)
- Feb 25, 2023
Malicious code in selfregamelgtb (PyPI)
- Feb 25, 2023
Malicious code in libintelurlurl (PyPI)
- Feb 25, 2023
Malicious code in tpinfostrpost (PyPI)
- Feb 25, 2023
Malicious code in selfstrvirtualrand (PyPI)
Page 390 of 479