Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tppycpurand (PyPI)
- Feb 25, 2023
Malicious code in tppinghydra (PyPI)
- Feb 25, 2023
Malicious code in selfhackednvidiamc (PyPI)
- Feb 25, 2023
Malicious code in py-maskinfostudy (PyPI)
- Feb 25, 2023
Malicious code in py-hackedkillcv (PyPI)
- Feb 25, 2023
Malicious code in libmcget (PyPI)
- Feb 25, 2023
Malicious code in esqproofcandylgtb (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiainfo (PyPI)
- Feb 25, 2023
Malicious code in esqkillsplitpull (PyPI)
- Feb 25, 2023
Malicious code in esqgamelgtb (PyPI)
- Feb 25, 2023
Malicious code in esqcpuvmvirtual (PyPI)
- Feb 25, 2023
Malicious code in tppushpullvisa (PyPI)
- Feb 25, 2023
Malicious code in selfponged (PyPI)
- Feb 25, 2023
Malicious code in py-visakill (PyPI)
- Feb 25, 2023
Malicious code in py-httpreplace (PyPI)
- Feb 25, 2023
Malicious code in py-ccvmtool (PyPI)
- Feb 25, 2023
Malicious code in libmcrandomre (PyPI)
- Feb 25, 2023
Malicious code in liblgtbgamesplit (PyPI)
- Feb 25, 2023
Malicious code in libgetpullmine (PyPI)
- Feb 25, 2023
Malicious code in esqramurl (PyPI)
- Feb 25, 2023
Malicious code in esqencodenvidiaurl (PyPI)
- Feb 25, 2023
Malicious code in tpintping (PyPI)
- Feb 25, 2023
Malicious code in tphydramask (PyPI)
- Feb 25, 2023
Malicious code in selfpywpaypalsplit (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolosint (PyPI)
- Feb 25, 2023
Malicious code in py-rerandom (PyPI)
- Feb 25, 2023
Malicious code in py-pullrand (PyPI)
- Feb 25, 2023
Malicious code in libkillcv (PyPI)
- Feb 25, 2023
Malicious code in esqpiplibrandom (PyPI)
- Feb 25, 2023
Malicious code in tpadmask (PyPI)
- Feb 25, 2023
Malicious code in selfpywsplitsuper (PyPI)
- Feb 25, 2023
Malicious code in selfpypull (PyPI)
- Feb 25, 2023
Malicious code in selfhackedintload (PyPI)
- Feb 25, 2023
Malicious code in selfguilibstring (PyPI)
- Feb 25, 2023
Malicious code in libpaypalosintvisa (PyPI)
- Feb 25, 2023
Malicious code in libadosint (PyPI)
- Feb 25, 2023
Malicious code in esqvmpyw (PyPI)
- Feb 25, 2023
Malicious code in selfvmcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfrandlgtb (PyPI)
- Feb 25, 2023
Malicious code in selfgamestring (PyPI)
- Feb 25, 2023
Malicious code in py-inforandom (PyPI)
- Feb 25, 2023
Malicious code in libvirtualpushpy (PyPI)
- Feb 25, 2023
Malicious code in librandomstudy (PyPI)
- Feb 25, 2023
Malicious code in libloadpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in esqreplacerandom (PyPI)
- Feb 25, 2023
Malicious code in esqrehydraencode (PyPI)
- Feb 25, 2023
Malicious code in selfremask (PyPI)
- Feb 25, 2023
Malicious code in selfpongnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-candyreplace (PyPI)
- Feb 25, 2023
Malicious code in libcraftcontrolcraft (PyPI)
Page 402 of 479