Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in esqpostcpu (PyPI)
- Feb 25, 2023
Malicious code in esqgamemask (PyPI)
- Feb 25, 2023
Malicious code in selfreplacereplace (PyPI)
- Feb 25, 2023
Malicious code in esqintelreplace (PyPI)
- Feb 25, 2023
Malicious code in tplgtbpull (PyPI)
- Feb 25, 2023
Malicious code in py-craftmine (PyPI)
- Feb 25, 2023
Malicious code in selfurlcraft (PyPI)
- Feb 25, 2023
Malicious code in tpgrandcontrol (PyPI)
- Feb 25, 2023
Malicious code in selframlgtb (PyPI)
- Feb 25, 2023
Malicious code in py-reencode (PyPI)
- Feb 25, 2023
Malicious code in esqgrandsuper (PyPI)
- Feb 25, 2023
Malicious code in tpstudyver (PyPI)
- Feb 25, 2023
Malicious code in selfsplitlib (PyPI)
- Feb 25, 2023
Malicious code in py-ponghacked (PyPI)
- Feb 25, 2023
Malicious code in libcpuvm (PyPI)
- Feb 25, 2023
Malicious code in tpramosint (PyPI)
- Feb 25, 2023
Malicious code in tpcontrolint (PyPI)
- Feb 25, 2023
Malicious code in tpcandykill (PyPI)
- Feb 25, 2023
Malicious code in selfpingvisa (PyPI)
- Feb 25, 2023
Malicious code in selfencodesplit (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolrandom (PyPI)
- Feb 25, 2023
Malicious code in py-visastring (PyPI)
- Feb 25, 2023
Malicious code in libinfogrand (PyPI)
- Feb 25, 2023
Malicious code in selfinforand (PyPI)
- Feb 25, 2023
Malicious code in py-librandom (PyPI)
- Feb 25, 2023
Malicious code in py-craftstring (PyPI)
- Feb 25, 2023
Malicious code in esqccvisa (PyPI)
- Feb 25, 2023
Malicious code in selfreplacepong (PyPI)
- Feb 25, 2023
Malicious code in py-visaver (PyPI)
- Feb 25, 2023
Malicious code in py-intload (PyPI)
- Feb 25, 2023
Malicious code in py-ccpyw (PyPI)
- Feb 25, 2023
Malicious code in libverpep (PyPI)
- Feb 25, 2023
Malicious code in selfcvpull (PyPI)
- Feb 25, 2023
Malicious code in selfcontrolpy (PyPI)
- Feb 25, 2023
Malicious code in esqencodemc (PyPI)
- Feb 25, 2023
Malicious code in tpultraintel (PyPI)
- Feb 25, 2023
Malicious code in py-verver (PyPI)
- Feb 25, 2023
Malicious code in py-hydracraft (PyPI)
- Feb 25, 2023
Malicious code in tpsplitlgtb (PyPI)
- Feb 25, 2023
Malicious code in py-mcpyw (PyPI)
- Feb 25, 2023
Malicious code in libsupercontrol (PyPI)
- Feb 25, 2023
Malicious code in libpycc (PyPI)
- Feb 25, 2023
Malicious code in selfvirtualencode (PyPI)
- Feb 25, 2023
Malicious code in py-httpkill (PyPI)
- Feb 25, 2023
Malicious code in py-stringlib (PyPI)
- Feb 25, 2023
Malicious code in libsplitintel (PyPI)
- Feb 25, 2023
Malicious code in py-stred (PyPI)
- Feb 25, 2023
Malicious code in selfgetmask (PyPI)
- Feb 25, 2023
Malicious code in py-cpumask (PyPI)
- Feb 25, 2023
Malicious code in tpstringlgtb (PyPI)
Page 427 of 479