Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in py-paypalhttp (PyPI)
- Feb 25, 2023
Malicious code in libcontrolgui (PyPI)
- Feb 25, 2023
Malicious code in esqpullpep (PyPI)
- Feb 25, 2023
Malicious code in esqgrandpull (PyPI)
- Feb 25, 2023
Malicious code in tpvirtualurl (PyPI)
- Feb 25, 2023
Malicious code in esqencodemask (PyPI)
- Feb 25, 2023
Malicious code in selfhttppep (PyPI)
- Feb 25, 2023
Malicious code in py-randommine (PyPI)
- Feb 25, 2023
Malicious code in selfguiad (PyPI)
- Feb 25, 2023
Malicious code in libvirtualpull (PyPI)
- Feb 25, 2023
Malicious code in selfpongencode (PyPI)
- Feb 25, 2023
Malicious code in selfcvvirtual (PyPI)
- Feb 25, 2023
Malicious code in libvmnvidia (PyPI)
- Feb 25, 2023
Malicious code in selfpongcpu (PyPI)
- Feb 25, 2023
Malicious code in selfpingram (PyPI)
- Feb 25, 2023
Malicious code in py-visapip (PyPI)
- Feb 25, 2023
Malicious code in py-pushcc (PyPI)
- Feb 25, 2023
Malicious code in libedgui (PyPI)
- Feb 25, 2023
Malicious code in esqgrandpaypal (PyPI)
- Feb 25, 2023
Malicious code in tpguied (PyPI)
- Feb 25, 2023
Malicious code in selfstudyhydra (PyPI)
- Feb 25, 2023
Malicious code in selfgamesplit (PyPI)
- Feb 25, 2023
Malicious code in py-ultrarandom (PyPI)
- Feb 25, 2023
Malicious code in libstudystring (PyPI)
- Feb 25, 2023
Malicious code in libminekill (PyPI)
- Feb 25, 2023
Malicious code in tpstrcpu (PyPI)
- Feb 25, 2023
Malicious code in selfstringlib (PyPI)
- Feb 25, 2023
Malicious code in selframstring (PyPI)
- Feb 25, 2023
Malicious code in py-hydrapy (PyPI)
- Feb 25, 2023
Malicious code in libosintinfo (PyPI)
- Feb 25, 2023
Malicious code in esqosintpull (PyPI)
- Feb 25, 2023
Malicious code in selfpepvirtual (PyPI)
- Feb 25, 2023
Malicious code in py-urlvm (PyPI)
- Feb 25, 2023
Malicious code in py-splitload (PyPI)
- Feb 25, 2023
Malicious code in libpostcandy (PyPI)
- Feb 25, 2023
Malicious code in tpgetosint (PyPI)
- Feb 25, 2023
Malicious code in py-encodeping (PyPI)
- Feb 25, 2023
Malicious code in libstringstr (PyPI)
- Feb 25, 2023
Malicious code in esqpippip (PyPI)
- Feb 25, 2023
Malicious code in esqpingint (PyPI)
- Feb 25, 2023
Malicious code in tpsuperpyw (PyPI)
- Feb 25, 2023
Malicious code in tpintelrandom (PyPI)
- Feb 25, 2023
Malicious code in py-intstring (PyPI)
- Feb 25, 2023
Malicious code in libloadram (PyPI)
- Feb 25, 2023
Malicious code in esqstringpong (PyPI)
- Feb 25, 2023
Malicious code in py-strrandom (PyPI)
- Feb 25, 2023
Malicious code in esqcvproof (PyPI)
- Feb 25, 2023
Malicious code in selfkilllgtb (PyPI)
- Feb 25, 2023
Malicious code in esqstringpaypal (PyPI)
- Feb 25, 2023
Malicious code in esqpywencode (PyPI)
Page 426 of 479