Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in selfpaypalad (PyPI)
- Feb 25, 2023
Malicious code in py-pingcraftmc (PyPI)
- Feb 25, 2023
Malicious code in py-intelvm (PyPI)
- Feb 25, 2023
Malicious code in py-hydraosinthydra (PyPI)
- Feb 25, 2023
Malicious code in libhttpcvurl (PyPI)
- Feb 25, 2023
Malicious code in esqvisaint (PyPI)
- Feb 25, 2023
Malicious code in esqpullkill (PyPI)
- Feb 25, 2023
Malicious code in esqosintvmpull (PyPI)
- Feb 25, 2023
Malicious code in esqminepysuper (PyPI)
- Feb 25, 2023
Malicious code in tploadpingrand (PyPI)
- Feb 25, 2023
Malicious code in tplibtoolhacked (PyPI)
- Feb 25, 2023
Malicious code in selfvmpyw (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpip (PyPI)
- Feb 25, 2023
Malicious code in libpingvisagui (PyPI)
- Feb 25, 2023
Malicious code in libcvverstr (PyPI)
- Feb 25, 2023
Malicious code in tpinfoproof (PyPI)
- Feb 25, 2023
Malicious code in tphackedrandomstring (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolram (PyPI)
- Feb 25, 2023
Malicious code in selfintgame (PyPI)
- Feb 25, 2023
Malicious code in py-virtualhydra (PyPI)
- Feb 25, 2023
Malicious code in py-pongpostmask (PyPI)
- Feb 25, 2023
Malicious code in librandomvm (PyPI)
- Feb 25, 2023
Malicious code in libpipcraftload (PyPI)
- Feb 25, 2023
Malicious code in esqvisapullre (PyPI)
- Feb 25, 2023
Malicious code in tphackedsplitcraft (PyPI)
- Feb 25, 2023
Malicious code in tpguimask (PyPI)
- Feb 25, 2023
Malicious code in selfpingcc (PyPI)
- Feb 25, 2023
Malicious code in selfencodevmcontrol (PyPI)
- Feb 25, 2023
Malicious code in py-randomcpu (PyPI)
- Feb 25, 2023
Malicious code in libosintmask (PyPI)
- Feb 25, 2023
Malicious code in esqpullrandomsplit (PyPI)
- Feb 25, 2023
Malicious code in tprelibpost (PyPI)
- Feb 25, 2023
Malicious code in tppiposintpost (PyPI)
- Feb 25, 2023
Malicious code in py-libvirtualram (PyPI)
- Feb 25, 2023
Malicious code in liblgtbstudy (PyPI)
- Feb 25, 2023
Malicious code in esqramreplace (PyPI)
- Feb 25, 2023
Malicious code in tpvminfopep (PyPI)
- Feb 25, 2023
Malicious code in tpsplitverpy (PyPI)
- Feb 25, 2023
Malicious code in selfurlhttp (PyPI)
- Feb 25, 2023
Malicious code in selfmccv (PyPI)
- Feb 25, 2023
Malicious code in py-cpurandom (PyPI)
- Feb 25, 2023
Malicious code in esqverrand (PyPI)
- Feb 25, 2023
Malicious code in esqsplitvm (PyPI)
- Feb 25, 2023
Malicious code in selfadcpu (PyPI)
- Feb 25, 2023
Malicious code in py-candycvproof (PyPI)
- Feb 25, 2023
Malicious code in libsuperhydrainfo (PyPI)
- Feb 25, 2023
Malicious code in libstringvmed (PyPI)
- Feb 25, 2023
Malicious code in libsplitencode (PyPI)
- Feb 25, 2023
Malicious code in esqsplitpepcv (PyPI)
- Feb 25, 2023
Malicious code in esqpywrandom (PyPI)
Page 419 of 479