Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libadstudypyw (PyPI)
- Feb 25, 2023
Malicious code in tpproofpushram (PyPI)
- Feb 25, 2023
Malicious code in selfstringstringgrand (PyPI)
- Feb 25, 2023
Malicious code in selfosinthackedpy (PyPI)
- Feb 25, 2023
Malicious code in libregame (PyPI)
- Feb 25, 2023
Malicious code in libloadpulllib (PyPI)
- Feb 25, 2023
Malicious code in libhydracvnvidia (PyPI)
- Feb 25, 2023
Malicious code in tprandpong (PyPI)
- Feb 25, 2023
Malicious code in selflibkill (PyPI)
- Feb 25, 2023
Malicious code in selfhydravmpaypal (PyPI)
- Feb 25, 2023
Malicious code in libverpip (PyPI)
- Feb 25, 2023
Malicious code in tpintelkillultra (PyPI)
- Feb 25, 2023
Malicious code in selfsuperhackedpy (PyPI)
- Feb 25, 2023
Malicious code in py-hydraurl (PyPI)
- Feb 25, 2023
Malicious code in esqpywmchttp (PyPI)
- Feb 25, 2023
Malicious code in selfvisavirtualmask (PyPI)
- Feb 25, 2023
Malicious code in py-killintel (PyPI)
- Feb 25, 2023
Malicious code in esqrandhacked (PyPI)
- Feb 25, 2023
Malicious code in tpresplitpull (PyPI)
- Feb 25, 2023
Malicious code in py-pongcraft (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmask (PyPI)
- Feb 25, 2023
Malicious code in selfcpure (PyPI)
- Feb 25, 2023
Malicious code in py-studypush (PyPI)
- Feb 25, 2023
Malicious code in py-maskgrand (PyPI)
- Feb 25, 2023
Malicious code in py-pymaskrand (PyPI)
- Feb 25, 2023
Malicious code in esqproofgetosint (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualhttpget (PyPI)
- Feb 25, 2023
Malicious code in esqpostver (PyPI)
- Feb 25, 2023
Malicious code in libstrget (PyPI)
- Feb 25, 2023
Malicious code in py-gamesuper (PyPI)
- Feb 25, 2023
Malicious code in selframpushrand (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualpong (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualinfovirtual (PyPI)
- Feb 25, 2023
Malicious code in selfloadvisa (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiastring (PyPI)
- Feb 25, 2023
Malicious code in libstringpy (PyPI)
- Feb 25, 2023
Malicious code in liblibgame (PyPI)
- Feb 25, 2023
Malicious code in libintelinfostr (PyPI)
- Feb 25, 2023
Malicious code in libcpumineed (PyPI)
- Feb 25, 2023
Malicious code in libadstringstudy (PyPI)
- Feb 25, 2023
Malicious code in esqsplitpushhydra (PyPI)
- Feb 25, 2023
Malicious code in esqpushload (PyPI)
- Feb 25, 2023
Malicious code in tpsuperping (PyPI)
- Feb 25, 2023
Malicious code in tprandomloadpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpaypalosintmine (PyPI)
- Feb 25, 2023
Malicious code in selfgrandencodecv (PyPI)
- Feb 25, 2023
Malicious code in py-infostring (PyPI)
- Feb 25, 2023
Malicious code in libsuperinfo (PyPI)
- Feb 25, 2023
Malicious code in libinfosuperint (PyPI)
Page 409 of 479