Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqsupertool (PyPI)
- Feb 25, 2023
Malicious code in esqcvstudycraft (PyPI)
- Feb 25, 2023
Malicious code in tpadtool (PyPI)
- Feb 25, 2023
Malicious code in selfvmload (PyPI)
- Feb 25, 2023
Malicious code in selfstringlgtbhttp (PyPI)
- Feb 25, 2023
Malicious code in py-virtualpaypalcraft (PyPI)
- Feb 25, 2023
Malicious code in py-minereplacesuper (PyPI)
- Feb 25, 2023
Malicious code in py-infoinfo (PyPI)
- Feb 25, 2023
Malicious code in py-candystring (PyPI)
- Feb 25, 2023
Malicious code in libpushpyw (PyPI)
- Feb 25, 2023
Malicious code in libcontrolosint (PyPI)
- Feb 25, 2023
Malicious code in esqpostcraft (PyPI)
- Feb 25, 2023
Malicious code in esqkillultrarand (PyPI)
- Feb 25, 2023
Malicious code in tpvisaproof (PyPI)
- Feb 25, 2023
Malicious code in py-visaurlosint (PyPI)
- Feb 25, 2023
Malicious code in libmcintel (PyPI)
- Feb 25, 2023
Malicious code in liblgtbpyw (PyPI)
- Feb 25, 2023
Malicious code in libinthydragrand (PyPI)
- Feb 25, 2023
Malicious code in esqvmvisapush (PyPI)
- Feb 25, 2023
Malicious code in esqpypaypalurl (PyPI)
- Feb 25, 2023
Malicious code in esqcpucraftstudy (PyPI)
- Feb 25, 2023
Malicious code in tpultralgtbcandy (PyPI)
- Feb 25, 2023
Malicious code in tppywed (PyPI)
- Feb 25, 2023
Malicious code in selflibliblib (PyPI)
- Feb 25, 2023
Malicious code in py-gameramcandy (PyPI)
- Feb 25, 2023
Malicious code in py-candykillencode (PyPI)
- Feb 25, 2023
Malicious code in libstringcandy (PyPI)
- Feb 25, 2023
Malicious code in librandcraftvirtual (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalosintpost (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiapyw (PyPI)
- Feb 25, 2023
Malicious code in selfvmpaypal (PyPI)
- Feb 25, 2023
Malicious code in selfkillcontrol (PyPI)
- Feb 25, 2023
Malicious code in selfintcontrolgrand (PyPI)
- Feb 25, 2023
Malicious code in liburlsuperpost (PyPI)
- Feb 25, 2023
Malicious code in libccraminfo (PyPI)
- Feb 25, 2023
Malicious code in esqrehttpinfo (PyPI)
- Feb 25, 2023
Malicious code in esqpushhttp (PyPI)
- Feb 25, 2023
Malicious code in esqpullurlget (PyPI)
- Feb 25, 2023
Malicious code in esqmcrand (PyPI)
- Feb 25, 2023
Malicious code in esqinthacked (PyPI)
- Feb 25, 2023
Malicious code in selfpipcpu (PyPI)
- Feb 25, 2023
Malicious code in selfgrandminepep (PyPI)
- Feb 25, 2023
Malicious code in selfgrandcandy (PyPI)
- Feb 25, 2023
Malicious code in selfcvhackedre (PyPI)
- Feb 25, 2023
Malicious code in py-paypalpippep (PyPI)
- Feb 25, 2023
Malicious code in py-guiminepep (PyPI)
- Feb 25, 2023
Malicious code in py-getsplitvisa (PyPI)
- Feb 25, 2023
Malicious code in esqvmvisa (PyPI)
- Feb 25, 2023
Malicious code in esqintelinfo (PyPI)
- Feb 25, 2023
Malicious code in tpsplitmcvisa (PyPI)
Page 410 of 479