Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libgrandosintencode (PyPI)
- Feb 25, 2023
Malicious code in esqpepvirtualinfo (PyPI)
- Feb 25, 2023
Malicious code in tpurled (PyPI)
- Feb 25, 2023
Malicious code in tpintelre (PyPI)
- Feb 25, 2023
Malicious code in selfguiinteled (PyPI)
- Feb 25, 2023
Malicious code in py-loadcpugui (PyPI)
- Feb 25, 2023
Malicious code in libsplitrandre (PyPI)
- Feb 25, 2023
Malicious code in libnvidiaencodehacked (PyPI)
- Feb 25, 2023
Malicious code in libmaskrandomcc (PyPI)
- Feb 25, 2023
Malicious code in libgamecontrol (PyPI)
- Feb 25, 2023
Malicious code in esqpingnvidia (PyPI)
- Feb 25, 2023
Malicious code in tpretoolproof (PyPI)
- Feb 25, 2023
Malicious code in tphackeded (PyPI)
- Feb 25, 2023
Malicious code in libinfore (PyPI)
- Feb 25, 2023
Malicious code in libcpuinted (PyPI)
- Feb 25, 2023
Malicious code in esqurlmine (PyPI)
- Feb 25, 2023
Malicious code in esqlibstrpost (PyPI)
- Feb 25, 2023
Malicious code in tpminevirtual (PyPI)
- Feb 25, 2023
Malicious code in tploadreplace (PyPI)
- Feb 25, 2023
Malicious code in py-pypywpy (PyPI)
- Feb 25, 2023
Malicious code in py-hackedcandyhttp (PyPI)
- Feb 25, 2023
Malicious code in libpushgrand (PyPI)
- Feb 25, 2023
Malicious code in tpreinfo (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiahttpreplace (PyPI)
- Feb 25, 2023
Malicious code in tpcved (PyPI)
- Feb 25, 2023
Malicious code in selframcandysplit (PyPI)
- Feb 25, 2023
Malicious code in py-virtualsplit (PyPI)
- Feb 25, 2023
Malicious code in py-regrand (PyPI)
- Feb 25, 2023
Malicious code in py-pingadkill (PyPI)
- Feb 25, 2023
Malicious code in py-intstr (PyPI)
- Feb 25, 2023
Malicious code in selfstringurlgrand (PyPI)
- Feb 25, 2023
Malicious code in selfstringpaypalcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpingcpuad (PyPI)
- Feb 25, 2023
Malicious code in selfintcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfgetinthydra (PyPI)
- Feb 25, 2023
Malicious code in esqedgrandpull (PyPI)
- Feb 25, 2023
Malicious code in esqccencode (PyPI)
- Feb 25, 2023
Malicious code in tprehacked (PyPI)
- Feb 25, 2023
Malicious code in tppongsplitrandom (PyPI)
- Feb 25, 2023
Malicious code in tphttpad (PyPI)
- Feb 25, 2023
Malicious code in selfstringcandycv (PyPI)
- Feb 25, 2023
Malicious code in py-vminforeplace (PyPI)
- Feb 25, 2023
Malicious code in libstringstringgame (PyPI)
- Feb 25, 2023
Malicious code in libgetpy (PyPI)
- Feb 25, 2023
Malicious code in esqsplithttpmc (PyPI)
- Feb 25, 2023
Malicious code in selfrandomhydratool (PyPI)
- Feb 25, 2023
Malicious code in py-postultra (PyPI)
- Feb 25, 2023
Malicious code in py-pingpostkill (PyPI)
- Feb 25, 2023
Malicious code in py-loadintel (PyPI)
- Feb 25, 2023
Malicious code in libosintstringcandy (PyPI)
Page 408 of 479