Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqstudyint (PyPI)
- Feb 25, 2023
Malicious code in esqstrosint (PyPI)
- Feb 25, 2023
Malicious code in tptoolstringpush (PyPI)
- Feb 25, 2023
Malicious code in tprandcandymask (PyPI)
- Feb 25, 2023
Malicious code in selfpipcandy (PyPI)
- Feb 25, 2023
Malicious code in selfgrandlgtbad (PyPI)
- Feb 25, 2023
Malicious code in py-loadmcvisa (PyPI)
- Feb 25, 2023
Malicious code in py-cvnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfpipcv (PyPI)
- Feb 25, 2023
Malicious code in selfhydrasplitpy (PyPI)
- Feb 25, 2023
Malicious code in selfhydrapong (PyPI)
- Feb 25, 2023
Malicious code in selfhydracpu (PyPI)
- Feb 25, 2023
Malicious code in libtoolcraftgrand (PyPI)
- Feb 25, 2023
Malicious code in esqvmgrandgrand (PyPI)
- Feb 25, 2023
Malicious code in tplgtbload (PyPI)
- Feb 25, 2023
Malicious code in selfintproofintel (PyPI)
- Feb 25, 2023
Malicious code in py-visapyw (PyPI)
- Feb 25, 2023
Malicious code in tppepcontrolstring (PyPI)
- Feb 25, 2023
Malicious code in tpcpuadpaypal (PyPI)
- Feb 25, 2023
Malicious code in py-strvm (PyPI)
- Feb 25, 2023
Malicious code in esqpongram (PyPI)
- Feb 25, 2023
Malicious code in tpproofadpyw (PyPI)
- Feb 25, 2023
Malicious code in tpinfovirtualpost (PyPI)
- Feb 25, 2023
Malicious code in py-pepproof (PyPI)
- Feb 25, 2023
Malicious code in libosintpostvisa (PyPI)
- Feb 25, 2023
Malicious code in esqsupergame (PyPI)
- Feb 25, 2023
Malicious code in py-renvidia (PyPI)
- Feb 25, 2023
Malicious code in py-pippushosint (PyPI)
- Feb 25, 2023
Malicious code in py-libhttpmc (PyPI)
- Feb 25, 2023
Malicious code in libvmproofcc (PyPI)
- Feb 25, 2023
Malicious code in tplgtbinfo (PyPI)
- Feb 25, 2023
Malicious code in selfpingvirtual (PyPI)
- Feb 25, 2023
Malicious code in libgrandgrand (PyPI)
- Feb 25, 2023
Malicious code in esqlibcpued (PyPI)
- Feb 25, 2023
Malicious code in esqccpep (PyPI)
- Feb 25, 2023
Malicious code in py-visaad (PyPI)
- Feb 25, 2023
Malicious code in esqpysuperinfo (PyPI)
- Feb 25, 2023
Malicious code in selfvmedram (PyPI)
- Feb 25, 2023
Malicious code in esqlibpippush (PyPI)
- Feb 25, 2023
Malicious code in selfinteledreplace (PyPI)
- Feb 25, 2023
Malicious code in py-studyguicontrol (PyPI)
- Feb 25, 2023
Malicious code in py-randgetad (PyPI)
- Feb 25, 2023
Malicious code in py-guiurl (PyPI)
- Feb 25, 2023
Malicious code in liblgtbosint (PyPI)
- Feb 25, 2023
Malicious code in liblgtbnvidiacontrol (PyPI)
- Feb 25, 2023
Malicious code in esqpepstring (PyPI)
- Feb 25, 2023
Malicious code in tpultragamerandom (PyPI)
- Feb 25, 2023
Malicious code in tpstrlibsplit (PyPI)
- Feb 25, 2023
Malicious code in tpprooftool (PyPI)
- Feb 25, 2023
Malicious code in tpminepaypal (PyPI)
Page 417 of 479