Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqramreplacestudy (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalinfogui (PyPI)
- Feb 25, 2023
Malicious code in esqosintpushcpu (PyPI)
- Feb 25, 2023
Malicious code in tppushgrandcraft (PyPI)
- Feb 25, 2023
Malicious code in tpmcrandpyw (PyPI)
- Feb 25, 2023
Malicious code in selfhydrastringpip (PyPI)
- Feb 25, 2023
Malicious code in py-studykill (PyPI)
- Feb 25, 2023
Malicious code in py-intpep (PyPI)
- Feb 25, 2023
Malicious code in libtoolram (PyPI)
- Feb 25, 2023
Malicious code in libpostpushping (PyPI)
- Feb 25, 2023
Malicious code in libintint (PyPI)
- Feb 25, 2023
Malicious code in libedpephttp (PyPI)
- Feb 25, 2023
Malicious code in esqmcgame (PyPI)
- Feb 25, 2023
Malicious code in tppipstrstr (PyPI)
- Feb 25, 2023
Malicious code in tplgtbmcultra (PyPI)
- Feb 25, 2023
Malicious code in tpgetpongre (PyPI)
- Feb 25, 2023
Malicious code in liburlpongpost (PyPI)
- Feb 25, 2023
Malicious code in esqrepyw (PyPI)
- Feb 25, 2023
Malicious code in tpedpyw (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolpipint (PyPI)
- Feb 25, 2023
Malicious code in tpccloadget (PyPI)
- Feb 25, 2023
Malicious code in selfccsupervm (PyPI)
- Feb 25, 2023
Malicious code in py-toolproofpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-hydragrandgame (PyPI)
- Feb 25, 2023
Malicious code in libvergameurl (PyPI)
- Feb 25, 2023
Malicious code in libreplacevm (PyPI)
- Feb 25, 2023
Malicious code in libpongproof (PyPI)
- Feb 25, 2023
Malicious code in tpsupergame (PyPI)
- Feb 25, 2023
Malicious code in selfstrtool (PyPI)
- Feb 25, 2023
Malicious code in libsplitpush (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpullsuper (PyPI)
- Feb 25, 2023
Malicious code in libencodeping (PyPI)
- Feb 25, 2023
Malicious code in libcvcv (PyPI)
- Feb 25, 2023
Malicious code in esqpongcontrolkill (PyPI)
- Feb 25, 2023
Malicious code in esqmaskpostgame (PyPI)
- Feb 25, 2023
Malicious code in tppushstring (PyPI)
- Feb 25, 2023
Malicious code in tplibinfo (PyPI)
- Feb 25, 2023
Malicious code in selfgrandhackedver (PyPI)
- Feb 25, 2023
Malicious code in selfgetmaskpong (PyPI)
- Feb 25, 2023
Malicious code in py-reosint (PyPI)
- Feb 25, 2023
Malicious code in libpushcv (PyPI)
- Feb 25, 2023
Malicious code in tpstrsplit (PyPI)
- Feb 25, 2023
Malicious code in tpcvpipgui (PyPI)
- Feb 25, 2023
Malicious code in selfencodegame (PyPI)
- Feb 25, 2023
Malicious code in py-studystring (PyPI)
- Feb 25, 2023
Malicious code in py-prooflibmc (PyPI)
- Feb 25, 2023
Malicious code in libproofsuper (PyPI)
- Feb 25, 2023
Malicious code in esqpullhackedvirtual (PyPI)
- Feb 25, 2023
Malicious code in selfrelgtbgrand (PyPI)
- Feb 25, 2023
Malicious code in py-stringvisarand (PyPI)
Page 403 of 479