Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in libvirtualpep (PyPI)
- Feb 25, 2023
Malicious code in esqgetvm (PyPI)
- Feb 25, 2023
Malicious code in selfstringrandomcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-osintpyw (PyPI)
- Feb 25, 2023
Malicious code in libvmrandomgui (PyPI)
- Feb 25, 2023
Malicious code in libguistrmc (PyPI)
- Feb 25, 2023
Malicious code in tpstrcccv (PyPI)
- Feb 25, 2023
Malicious code in tpnvidiaver (PyPI)
- Feb 25, 2023
Malicious code in tpmaskvisareplace (PyPI)
- Feb 25, 2023
Malicious code in tpkillgame (PyPI)
- Feb 25, 2023
Malicious code in selfultraram (PyPI)
- Feb 25, 2023
Malicious code in selfsuperultra (PyPI)
- Feb 25, 2023
Malicious code in selfcvpy (PyPI)
- Feb 25, 2023
Malicious code in py-loadpycraft (PyPI)
- Feb 25, 2023
Malicious code in libultraram (PyPI)
- Feb 25, 2023
Malicious code in esqpushkill (PyPI)
- Feb 25, 2023
Malicious code in esqedcpumask (PyPI)
- Feb 25, 2023
Malicious code in tpstringmced (PyPI)
- Feb 25, 2023
Malicious code in tprecpu (PyPI)
- Feb 25, 2023
Malicious code in tphttpgetload (PyPI)
- Feb 25, 2023
Malicious code in selfsupertool (PyPI)
- Feb 25, 2023
Malicious code in selfreloadlib (PyPI)
- Feb 25, 2023
Malicious code in selfmaskpong (PyPI)
- Feb 25, 2023
Malicious code in py-verurl (PyPI)
- Feb 25, 2023
Malicious code in py-replacerandom (PyPI)
- Feb 25, 2023
Malicious code in libpaypalpost (PyPI)
- Feb 25, 2023
Malicious code in libmaskhackedsplit (PyPI)
- Feb 25, 2023
Malicious code in libkillvisare (PyPI)
- Feb 25, 2023
Malicious code in esqpushvm (PyPI)
- Feb 25, 2023
Malicious code in esqpushget (PyPI)
- Feb 25, 2023
Malicious code in tpadcandy (PyPI)
- Feb 25, 2023
Malicious code in selfpullproof (PyPI)
- Feb 25, 2023
Malicious code in selfhydragamever (PyPI)
- Feb 25, 2023
Malicious code in selfgamemcnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfedload (PyPI)
- Feb 25, 2023
Malicious code in py-pullping (PyPI)
- Feb 25, 2023
Malicious code in py-pullnvidiacontrol (PyPI)
- Feb 25, 2023
Malicious code in py-mcrand (PyPI)
- Feb 25, 2023
Malicious code in py-getcrafttool (PyPI)
- Feb 25, 2023
Malicious code in py-controlcraftstr (PyPI)
- Feb 25, 2023
Malicious code in esqsupercpuurl (PyPI)
- Feb 25, 2023
Malicious code in esqcraftvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpstudyintmc (PyPI)
- Feb 25, 2023
Malicious code in tpreplaceget (PyPI)
- Feb 25, 2023
Malicious code in tphackedmask (PyPI)
- Feb 25, 2023
Malicious code in tpcvhydrastring (PyPI)
- Feb 25, 2023
Malicious code in tpadrandommc (PyPI)
- Feb 25, 2023
Malicious code in selfpepcc (PyPI)
- Feb 25, 2023
Malicious code in py-pongtoolkill (PyPI)
- Feb 25, 2023
Malicious code in py-candylgtb (PyPI)
Page 415 of 479