Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in liburlinfogrand (PyPI)
- Feb 25, 2023
Malicious code in libtoolintencode (PyPI)
- Feb 25, 2023
Malicious code in libcontrolramre (PyPI)
- Feb 25, 2023
Malicious code in esqpeppull (PyPI)
- Feb 25, 2023
Malicious code in tppaypalintel (PyPI)
- Feb 25, 2023
Malicious code in tpgamelib (PyPI)
- Feb 25, 2023
Malicious code in selfinfopynvidia (PyPI)
- Feb 25, 2023
Malicious code in selfedadintel (PyPI)
- Feb 25, 2023
Malicious code in py-libedvm (PyPI)
- Feb 25, 2023
Malicious code in esqmaskad (PyPI)
- Feb 25, 2023
Malicious code in tpadtoolmc (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpushcraft (PyPI)
- Feb 25, 2023
Malicious code in selfliburlrand (PyPI)
- Feb 25, 2023
Malicious code in selfcontroledreplace (PyPI)
- Feb 25, 2023
Malicious code in py-replacere (PyPI)
- Feb 25, 2023
Malicious code in py-loadpep (PyPI)
- Feb 25, 2023
Malicious code in py-adping (PyPI)
- Feb 25, 2023
Malicious code in librandcraft (PyPI)
- Feb 25, 2023
Malicious code in libcvencode (PyPI)
- Feb 25, 2023
Malicious code in esqsupervirtualpy (PyPI)
- Feb 25, 2023
Malicious code in esqrandlgtb (PyPI)
- Feb 25, 2023
Malicious code in esqlibpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqcvrandomcontrol (PyPI)
- Feb 25, 2023
Malicious code in tpcvultra (PyPI)
- Feb 25, 2023
Malicious code in selfurlpywrandom (PyPI)
- Feb 25, 2023
Malicious code in selflibcpu (PyPI)
- Feb 25, 2023
Malicious code in selfinfocraftlib (PyPI)
- Feb 25, 2023
Malicious code in selfencodetoolcpu (PyPI)
- Feb 25, 2023
Malicious code in selfencodepywrand (PyPI)
- Feb 25, 2023
Malicious code in libstringpostvisa (PyPI)
- Feb 25, 2023
Malicious code in esqccpygrand (PyPI)
- Feb 25, 2023
Malicious code in tpccpip (PyPI)
- Feb 25, 2023
Malicious code in selfpingpush (PyPI)
- Feb 25, 2023
Malicious code in selfpeppep (PyPI)
- Feb 25, 2023
Malicious code in py-vmmc (PyPI)
- Feb 25, 2023
Malicious code in py-mcpushmask (PyPI)
- Feb 25, 2023
Malicious code in py-cvverload (PyPI)
- Feb 25, 2023
Malicious code in py-controlmask (PyPI)
- Feb 25, 2023
Malicious code in esqpyinted (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalvmget (PyPI)
- Feb 25, 2023
Malicious code in tpurlguiint (PyPI)
- Feb 25, 2023
Malicious code in tpgrandsplitcv (PyPI)
- Feb 25, 2023
Malicious code in selfstudylgtb (PyPI)
- Feb 25, 2023
Malicious code in selfpongpytool (PyPI)
- Feb 25, 2023
Malicious code in py-pongcandyram (PyPI)
- Feb 25, 2023
Malicious code in py-gamerepong (PyPI)
- Feb 25, 2023
Malicious code in libpywrand (PyPI)
- Feb 25, 2023
Malicious code in selfhackedspliturl (PyPI)
- Feb 25, 2023
Malicious code in py-pongedvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-nvidiacandy (PyPI)
Page 416 of 479