Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfultracpu (PyPI)
- Feb 25, 2023
Malicious code in selfstrcc (PyPI)
- Feb 25, 2023
Malicious code in py-virtualgetvm (PyPI)
- Feb 25, 2023
Malicious code in py-pinghydra (PyPI)
- Feb 25, 2023
Malicious code in esqurlhackedrand (PyPI)
- Feb 25, 2023
Malicious code in esqstringpushload (PyPI)
- Feb 25, 2023
Malicious code in esqcandygrandtool (PyPI)
- Feb 25, 2023
Malicious code in selfstrspliturl (PyPI)
- Feb 25, 2023
Malicious code in selfhackedmcpong (PyPI)
- Feb 25, 2023
Malicious code in py-vmcontrolgrand (PyPI)
- Feb 25, 2023
Malicious code in py-virtualpip (PyPI)
- Feb 25, 2023
Malicious code in py-studygame (PyPI)
- Feb 25, 2023
Malicious code in py-killcandyosint (PyPI)
- Feb 25, 2023
Malicious code in esqtoolmaskver (PyPI)
- Feb 25, 2023
Malicious code in esqpipvisacv (PyPI)
- Feb 25, 2023
Malicious code in esqintstudy (PyPI)
- Feb 25, 2023
Malicious code in esqgamepystudy (PyPI)
- Feb 25, 2023
Malicious code in esqadpip (PyPI)
- Feb 25, 2023
Malicious code in tpurlstudy (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiapush (PyPI)
- Feb 25, 2023
Malicious code in selfminehydraload (PyPI)
- Feb 25, 2023
Malicious code in py-hydrapost (PyPI)
- Feb 25, 2023
Malicious code in py-cvint (PyPI)
- Feb 25, 2023
Malicious code in libpostping (PyPI)
- Feb 25, 2023
Malicious code in tpencodecandy (PyPI)
- Feb 25, 2023
Malicious code in selfvmrandom (PyPI)
- Feb 25, 2023
Malicious code in py-proofmask (PyPI)
- Feb 25, 2023
Malicious code in py-libverstr (PyPI)
- Feb 25, 2023
Malicious code in py-libstring (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbminecc (PyPI)
- Feb 25, 2023
Malicious code in librandomguitool (PyPI)
- Feb 25, 2023
Malicious code in esqreplacepull (PyPI)
- Feb 25, 2023
Malicious code in esqpywloadmask (PyPI)
- Feb 25, 2023
Malicious code in tpgetsuperurl (PyPI)
- Feb 25, 2023
Malicious code in tpencodesuper (PyPI)
- Feb 25, 2023
Malicious code in py-killsuper (PyPI)
- Feb 25, 2023
Malicious code in libcontrolramhacked (PyPI)
- Feb 25, 2023
Malicious code in esqvmccmc (PyPI)
- Feb 25, 2023
Malicious code in esqurlver (PyPI)
- Feb 25, 2023
Malicious code in esqtoolcvsplit (PyPI)
- Feb 25, 2023
Malicious code in esqpywramultra (PyPI)
- Feb 25, 2023
Malicious code in esqmineultramask (PyPI)
- Feb 25, 2023
Malicious code in tpvisapull (PyPI)
- Feb 25, 2023
Malicious code in selfverproofrandom (PyPI)
- Feb 25, 2023
Malicious code in selfproofgame (PyPI)
- Feb 25, 2023
Malicious code in selfloadcc (PyPI)
- Feb 25, 2023
Malicious code in selfgamekilltool (PyPI)
- Feb 25, 2023
Malicious code in py-peplgtb (PyPI)
- Feb 25, 2023
Malicious code in py-encodeinfogui (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalvisa (PyPI)
Page 413 of 479