Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfreplacetoolstr (PyPI)
- Feb 25, 2023
Malicious code in py-pywreplace (PyPI)
- Feb 25, 2023
Malicious code in py-controlpymc (PyPI)
- Feb 25, 2023
Malicious code in esqtoolrand (PyPI)
- Feb 25, 2023
Malicious code in esqrandomstr (PyPI)
- Feb 25, 2023
Malicious code in esqgetnvidia (PyPI)
- Feb 25, 2023
Malicious code in esqcraftcontrol (PyPI)
- Feb 25, 2023
Malicious code in esqcctool (PyPI)
- Feb 25, 2023
Malicious code in tppywgrand (PyPI)
- Feb 25, 2023
Malicious code in tppykillkill (PyPI)
- Feb 25, 2023
Malicious code in tpproofpip (PyPI)
- Feb 25, 2023
Malicious code in tppostre (PyPI)
- Feb 25, 2023
Malicious code in tpmchackedstr (PyPI)
- Feb 25, 2023
Malicious code in tphackedgetvisa (PyPI)
- Feb 25, 2023
Malicious code in selfpostcpu (PyPI)
- Feb 25, 2023
Malicious code in py-pongultravm (PyPI)
- Feb 25, 2023
Malicious code in py-hackedosintlib (PyPI)
- Feb 25, 2023
Malicious code in libminepushrandom (PyPI)
- Feb 25, 2023
Malicious code in libintcontrol (PyPI)
- Feb 25, 2023
Malicious code in esqsuperrandomencode (PyPI)
- Feb 25, 2023
Malicious code in esqregame (PyPI)
- Feb 25, 2023
Malicious code in esqcontrolad (PyPI)
- Feb 25, 2023
Malicious code in tprandloadinfo (PyPI)
- Feb 25, 2023
Malicious code in tpproofpushkill (PyPI)
- Feb 25, 2023
Malicious code in tpintelcv (PyPI)
- Feb 25, 2023
Malicious code in selfpongpull (PyPI)
- Feb 25, 2023
Malicious code in selfedrandomad (PyPI)
- Feb 25, 2023
Malicious code in selfcraftcpu (PyPI)
- Feb 25, 2023
Malicious code in py-posthydratool (PyPI)
- Feb 25, 2023
Malicious code in py-killint (PyPI)
- Feb 25, 2023
Malicious code in libmccandyhttp (PyPI)
- Feb 25, 2023
Malicious code in libgetcccandy (PyPI)
- Feb 25, 2023
Malicious code in tpvisapostping (PyPI)
- Feb 25, 2023
Malicious code in tppeppaypalhttp (PyPI)
- Feb 25, 2023
Malicious code in selfrandomgui (PyPI)
- Feb 25, 2023
Malicious code in py-ultracv (PyPI)
- Feb 25, 2023
Malicious code in libvirtualgame (PyPI)
- Feb 25, 2023
Malicious code in libstudyreplace (PyPI)
- Feb 25, 2023
Malicious code in libmaskreurl (PyPI)
- Feb 25, 2023
Malicious code in libcpuhydraintel (PyPI)
- Feb 25, 2023
Malicious code in esqramcv (PyPI)
- Feb 25, 2023
Malicious code in esqpepmaskram (PyPI)
- Feb 25, 2023
Malicious code in tprandpullstudy (PyPI)
- Feb 25, 2023
Malicious code in tpproofreplace (PyPI)
- Feb 25, 2023
Malicious code in py-ramsplitcandy (PyPI)
- Feb 25, 2023
Malicious code in esqstudykillrand (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiahttpvm (PyPI)
- Feb 25, 2023
Malicious code in esqmccvvirtual (PyPI)
- Feb 25, 2023
Malicious code in esqloadvercv (PyPI)
- Feb 25, 2023
Malicious code in selfpyping (PyPI)
Page 418 of 479