Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libcvstred (PyPI)
- Feb 25, 2023
Malicious code in esqurledad (PyPI)
- Feb 25, 2023
Malicious code in tphackedvirtualad (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolpullmine (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualvermine (PyPI)
- Feb 25, 2023
Malicious code in py-intelosintosint (PyPI)
- Feb 25, 2023
Malicious code in libccgetsuper (PyPI)
- Feb 25, 2023
Malicious code in tpreplaceloadpong (PyPI)
- Feb 25, 2023
Malicious code in tppongultrapush (PyPI)
- Feb 25, 2023
Malicious code in selfccedpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-cvstringed (PyPI)
- Feb 25, 2023
Malicious code in libpipultraproof (PyPI)
- Feb 25, 2023
Malicious code in libcontrolinfomine (PyPI)
- Feb 25, 2023
Malicious code in esqvmguigui (PyPI)
- Feb 25, 2023
Malicious code in esqpushccre (PyPI)
- Feb 25, 2023
Malicious code in esqpingadcandy (PyPI)
- Feb 25, 2023
Malicious code in esqcpurandomver (PyPI)
- Feb 25, 2023
Malicious code in tpsplitpystudy (PyPI)
- Feb 25, 2023
Malicious code in selfgetreplacepong (PyPI)
- Feb 25, 2023
Malicious code in py-replaceverreplace (PyPI)
- Feb 25, 2023
Malicious code in py-osintultraad (PyPI)
- Feb 25, 2023
Malicious code in py-infopullhydra (PyPI)
- Feb 25, 2023
Malicious code in py-cpucandyultra (PyPI)
- Feb 25, 2023
Malicious code in libverhackedhacked (PyPI)
- Feb 25, 2023
Malicious code in esqmaskcraftpull (PyPI)
- Feb 25, 2023
Malicious code in esqintpushgame (PyPI)
- Feb 25, 2023
Malicious code in tppullproofurl (PyPI)
- Feb 25, 2023
Malicious code in selflgtbpostcandy (PyPI)
- Feb 25, 2023
Malicious code in py-paypalloadver (PyPI)
- Feb 25, 2023
Malicious code in py-httpaded (PyPI)
- Feb 25, 2023
Malicious code in libvmpushrandom (PyPI)
- Feb 25, 2023
Malicious code in librandgrandpip (PyPI)
- Feb 25, 2023
Malicious code in esqvisacpucraft (PyPI)
- Feb 25, 2023
Malicious code in esqultragrandgame (PyPI)
- Feb 25, 2023
Malicious code in esqosintpullproof (PyPI)
- Feb 25, 2023
Malicious code in esqccpostmask (PyPI)
- Feb 25, 2023
Malicious code in tppyliblgtb (PyPI)
- Feb 25, 2023
Malicious code in tplgtbencodecraft (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualpippong (PyPI)
- Feb 25, 2023
Malicious code in selfpullstringver (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalpywgame (PyPI)
- Feb 25, 2023
Malicious code in py-libpushram (PyPI)
- Feb 25, 2023
Malicious code in liblgtbproofpy (PyPI)
- Feb 25, 2023
Malicious code in selfosintstudyhttp (PyPI)
- Feb 25, 2023
Malicious code in py-pongvmstring (PyPI)
- Feb 25, 2023
Malicious code in libramreplacelgtb (PyPI)
- Feb 25, 2023
Malicious code in esqpywpoststudy (PyPI)
- Feb 25, 2023
Malicious code in esqpipgetgrand (PyPI)
- Feb 25, 2023
Malicious code in tpinfotoolcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalpepcc (PyPI)
Page 392 of 479