Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfencodeverosint (PyPI)
- Feb 25, 2023
Malicious code in libpywedosint (PyPI)
- Feb 25, 2023
Malicious code in liblgtbstringgame (PyPI)
- Feb 25, 2023
Malicious code in selfmcmaskintel (PyPI)
- Feb 25, 2023
Malicious code in libpepreplacegui (PyPI)
- Feb 25, 2023
Malicious code in selfpippushhttp (PyPI)
- Feb 25, 2023
Malicious code in tpreedpep (PyPI)
- Feb 25, 2023
Malicious code in libhttposintgame (PyPI)
- Feb 25, 2023
Malicious code in tpmaskvisa (PyPI)
- Feb 25, 2023
Malicious code in selfstringmaskvirtual (PyPI)
- Feb 25, 2023
Malicious code in selfpingrampep (PyPI)
- Feb 25, 2023
Malicious code in py-ultraintvisa (PyPI)
- Feb 25, 2023
Malicious code in py-replaceinfosplit (PyPI)
- Feb 25, 2023
Malicious code in py-ramintelpull (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbosintproof (PyPI)
- Feb 25, 2023
Malicious code in tpgrandpyw (PyPI)
- Feb 25, 2023
Malicious code in selfminepong (PyPI)
- Feb 25, 2023
Malicious code in py-supergetint (PyPI)
- Feb 25, 2023
Malicious code in py-studypostgame (PyPI)
- Feb 25, 2023
Malicious code in py-intelinfo (PyPI)
- Feb 25, 2023
Malicious code in py-hackedram (PyPI)
- Feb 25, 2023
Malicious code in liblibint (PyPI)
- Feb 25, 2023
Malicious code in esqpullmine (PyPI)
- Feb 25, 2023
Malicious code in esqkillosintpost (PyPI)
- Feb 25, 2023
Malicious code in esqcandysplitpull (PyPI)
- Feb 25, 2023
Malicious code in py-prooflib (PyPI)
- Feb 25, 2023
Malicious code in py-poststudy (PyPI)
- Feb 25, 2023
Malicious code in libpongram (PyPI)
- Feb 25, 2023
Malicious code in esqreplaceguistudy (PyPI)
- Feb 25, 2023
Malicious code in tppaypalver (PyPI)
- Feb 25, 2023
Malicious code in tpintloadpep (PyPI)
- Feb 25, 2023
Malicious code in py-restringproof (PyPI)
- Feb 25, 2023
Malicious code in py-peprandompaypal (PyPI)
- Feb 25, 2023
Malicious code in tpcvpygui (PyPI)
- Feb 25, 2023
Malicious code in selfultrapywsuper (PyPI)
- Feb 25, 2023
Malicious code in selfsplitad (PyPI)
- Feb 25, 2023
Malicious code in selfrestr (PyPI)
- Feb 25, 2023
Malicious code in selfpippaypal (PyPI)
- Feb 25, 2023
Malicious code in selfadrand (PyPI)
- Feb 25, 2023
Malicious code in py-studyinfo (PyPI)
- Feb 25, 2023
Malicious code in py-pushinfo (PyPI)
- Feb 25, 2023
Malicious code in py-maskgetpong (PyPI)
- Feb 25, 2023
Malicious code in libmaskstudyrandom (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualpywproof (PyPI)
- Feb 25, 2023
Malicious code in tppyproofpull (PyPI)
- Feb 25, 2023
Malicious code in tppaypalping (PyPI)
- Feb 25, 2023
Malicious code in tphydraping (PyPI)
- Feb 25, 2023
Malicious code in tpgrandloadload (PyPI)
- Feb 25, 2023
Malicious code in selfpushstr (PyPI)
- Feb 25, 2023
Malicious code in libhttppip (PyPI)
Page 400 of 479