Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selftoolram (PyPI)
- Feb 25, 2023
Malicious code in selfhydralib (PyPI)
- Feb 25, 2023
Malicious code in libintnvidiagame (PyPI)
- Feb 25, 2023
Malicious code in tpstringlibpip (PyPI)
- Feb 25, 2023
Malicious code in tpminecc (PyPI)
- Feb 25, 2023
Malicious code in tpgameurl (PyPI)
- Feb 25, 2023
Malicious code in selfencodekill (PyPI)
- Feb 25, 2023
Malicious code in esqramed (PyPI)
- Feb 25, 2023
Malicious code in selfmineguipyw (PyPI)
- Feb 25, 2023
Malicious code in libhydravmmine (PyPI)
- Feb 25, 2023
Malicious code in py-mcloadpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqlgtbosint (PyPI)
- Feb 25, 2023
Malicious code in esqadsplit (PyPI)
- Feb 25, 2023
Malicious code in tppywvirtual (PyPI)
- Feb 25, 2023
Malicious code in selflibrandomcv (PyPI)
- Feb 25, 2023
Malicious code in selfhackedcvnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-adcpu (PyPI)
- Feb 25, 2023
Malicious code in esqurlpip (PyPI)
- Feb 25, 2023
Malicious code in esqcpucandy (PyPI)
- Feb 25, 2023
Malicious code in tprandomsplit (PyPI)
- Feb 25, 2023
Malicious code in tphttppipstring (PyPI)
- Feb 25, 2023
Malicious code in selfultravirtualpy (PyPI)
- Feb 25, 2023
Malicious code in selfencoderandom (PyPI)
- Feb 25, 2023
Malicious code in py-ultrastringget (PyPI)
- Feb 25, 2023
Malicious code in libvisastr (PyPI)
- Feb 25, 2023
Malicious code in libpushvisa (PyPI)
- Feb 25, 2023
Malicious code in libpullpep (PyPI)
- Feb 25, 2023
Malicious code in libminenvidiahydra (PyPI)
- Feb 25, 2023
Malicious code in esqcraftrandnvidia (PyPI)
- Feb 25, 2023
Malicious code in tprelibcpu (PyPI)
- Feb 25, 2023
Malicious code in tpencodecpupong (PyPI)
- Feb 25, 2023
Malicious code in selfpipstringcc (PyPI)
- Feb 25, 2023
Malicious code in selfpepkill (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmaskultra (PyPI)
- Feb 25, 2023
Malicious code in selfgeturl (PyPI)
- Feb 25, 2023
Malicious code in selfcvproofsuper (PyPI)
- Feb 25, 2023
Malicious code in py-maskosintpull (PyPI)
- Feb 25, 2023
Malicious code in libvisamc (PyPI)
- Feb 25, 2023
Malicious code in libstringgetosint (PyPI)
- Feb 25, 2023
Malicious code in librandomget (PyPI)
- Feb 25, 2023
Malicious code in libpullstring (PyPI)
- Feb 25, 2023
Malicious code in esqrepyvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpramguihttp (PyPI)
- Feb 25, 2023
Malicious code in tpgetstr (PyPI)
- Feb 25, 2023
Malicious code in tpcpugetping (PyPI)
- Feb 25, 2023
Malicious code in selfvergui (PyPI)
- Feb 25, 2023
Malicious code in py-pipstudystr (PyPI)
- Feb 25, 2023
Malicious code in py-gameremc (PyPI)
- Feb 25, 2023
Malicious code in libpullcandy (PyPI)
- Feb 25, 2023
Malicious code in libinfohacked (PyPI)
Page 407 of 479