Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-infoponghttp (PyPI)
- Feb 25, 2023
Malicious code in esqloadvisa (PyPI)
- Feb 25, 2023
Malicious code in esqkillram (PyPI)
- Feb 25, 2023
Malicious code in esqcraftkilllib (PyPI)
- Feb 25, 2023
Malicious code in tpcandycc (PyPI)
- Feb 25, 2023
Malicious code in selfhttpproof (PyPI)
- Feb 25, 2023
Malicious code in selfhackedinfo (PyPI)
- Feb 25, 2023
Malicious code in selfhackedccmc (PyPI)
- Feb 25, 2023
Malicious code in libstrpullpost (PyPI)
- Feb 25, 2023
Malicious code in tpcpulgtb (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalintel (PyPI)
- Feb 25, 2023
Malicious code in py-randomloadcandy (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbencode (PyPI)
- Feb 25, 2023
Malicious code in libhydracraftrand (PyPI)
- Feb 25, 2023
Malicious code in esqgetvisacraft (PyPI)
- Feb 25, 2023
Malicious code in selfstudygrand (PyPI)
- Feb 25, 2023
Malicious code in selfloadintel (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbadget (PyPI)
- Feb 25, 2023
Malicious code in selfgamepingurl (PyPI)
- Feb 25, 2023
Malicious code in py-verintsplit (PyPI)
- Feb 25, 2023
Malicious code in py-strlgtbstudy (PyPI)
- Feb 25, 2023
Malicious code in esqkillpywreplace (PyPI)
- Feb 25, 2023
Malicious code in selfrandompep (PyPI)
- Feb 25, 2023
Malicious code in libpywgame (PyPI)
- Feb 25, 2023
Malicious code in esqrecandy (PyPI)
- Feb 25, 2023
Malicious code in esqinfoproofvm (PyPI)
- Feb 25, 2023
Malicious code in esqadpaypal (PyPI)
- Feb 25, 2023
Malicious code in libramvmver (PyPI)
- Feb 25, 2023
Malicious code in libcraftstringcc (PyPI)
- Feb 25, 2023
Malicious code in tppingreplace (PyPI)
- Feb 25, 2023
Malicious code in esqmcpypaypal (PyPI)
- Feb 25, 2023
Malicious code in tpgrandkillhydra (PyPI)
- Feb 25, 2023
Malicious code in selfmineurl (PyPI)
- Feb 25, 2023
Malicious code in py-ultralib (PyPI)
- Feb 25, 2023
Malicious code in py-strnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-postgameintel (PyPI)
- Feb 25, 2023
Malicious code in libvmrand (PyPI)
- Feb 25, 2023
Malicious code in libpushrandlib (PyPI)
- Feb 25, 2023
Malicious code in libpinggetcc (PyPI)
- Feb 25, 2023
Malicious code in libpepstring (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpaypalrandom (PyPI)
- Feb 25, 2023
Malicious code in libcchydraencode (PyPI)
- Feb 25, 2023
Malicious code in esqstrproofint (PyPI)
- Feb 25, 2023
Malicious code in esqadpostmine (PyPI)
- Feb 25, 2023
Malicious code in tpminepostcpu (PyPI)
- Feb 25, 2023
Malicious code in tpintelcraft (PyPI)
- Feb 25, 2023
Malicious code in tpcpuintcpu (PyPI)
- Feb 25, 2023
Malicious code in py-vermine (PyPI)
- Feb 25, 2023
Malicious code in py-pippywvm (PyPI)
- Feb 25, 2023
Malicious code in py-gamecccpu (PyPI)
Page 404 of 479