Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-cpumcpyw (PyPI)
- Feb 25, 2023
Malicious code in libpepproofstring (PyPI)
- Feb 25, 2023
Malicious code in libpepcontrolultra (PyPI)
- Feb 25, 2023
Malicious code in libminevisarand (PyPI)
- Feb 25, 2023
Malicious code in liblibcvsuper (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpostinfo (PyPI)
- Feb 25, 2023
Malicious code in libcvminecandy (PyPI)
- Feb 25, 2023
Malicious code in esqstudytoollgtb (PyPI)
- Feb 25, 2023
Malicious code in esqstrpushmc (PyPI)
- Feb 25, 2023
Malicious code in tpguicvintel (PyPI)
- Feb 25, 2023
Malicious code in selfpiplibver (PyPI)
- Feb 25, 2023
Malicious code in py-paypalsplitpush (PyPI)
- Feb 25, 2023
Malicious code in py-httpreplacerand (PyPI)
- Feb 25, 2023
Malicious code in libkillstringreplace (PyPI)
- Feb 25, 2023
Malicious code in libguistudyram (PyPI)
- Feb 25, 2023
Malicious code in libgrandintelpy (PyPI)
- Feb 25, 2023
Malicious code in libcontrolkillload (PyPI)
- Feb 25, 2023
Malicious code in esqgetcraftstudy (PyPI)
- Feb 25, 2023
Malicious code in tpvirtuallgtbpull (PyPI)
- Feb 25, 2023
Malicious code in tpguiadcraft (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualinfore (PyPI)
- Feb 25, 2023
Malicious code in selfmaskstudyint (PyPI)
- Feb 25, 2023
Malicious code in selfadpepgame (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbreplacemc (PyPI)
- Feb 25, 2023
Malicious code in librandomadproof (PyPI)
- Feb 25, 2023
Malicious code in esqvirtualpywgrand (PyPI)
- Feb 25, 2023
Malicious code in esqurladver (PyPI)
- Feb 25, 2023
Malicious code in esqultraposthttp (PyPI)
- Feb 25, 2023
Malicious code in esqmctoolintel (PyPI)
- Feb 25, 2023
Malicious code in esqedgameultra (PyPI)
- Feb 25, 2023
Malicious code in esqadhydrapull (PyPI)
- Feb 25, 2023
Malicious code in tpproofreplacereplace (PyPI)
- Feb 25, 2023
Malicious code in tpminevervirtual (PyPI)
- Feb 25, 2023
Malicious code in py-osintvirtualgui (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiapepnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-grandpostver (PyPI)
- Feb 25, 2023
Malicious code in py-encodevirtualgui (PyPI)
- Feb 25, 2023
Malicious code in py-adtoolurl (PyPI)
- Feb 25, 2023
Malicious code in libhackedpepreplace (PyPI)
- Feb 25, 2023
Malicious code in libcraftmcrand (PyPI)
- Feb 25, 2023
Malicious code in esqposthttpstudy (PyPI)
- Feb 25, 2023
Malicious code in tpstudygetreplace (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolhydramine (PyPI)
- Feb 25, 2023
Malicious code in libversupercv (PyPI)
- Feb 25, 2023
Malicious code in libtoolmcver (PyPI)
- Feb 25, 2023
Malicious code in libsupervisaed (PyPI)
- Feb 25, 2023
Malicious code in librandloadmine (PyPI)
- Feb 25, 2023
Malicious code in libpostvmgrand (PyPI)
- Feb 25, 2023
Malicious code in esqpepretool (PyPI)
- Feb 25, 2023
Malicious code in esqlibpushload (PyPI)
Page 395 of 479