Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tpmcvisa (PyPI)
- Feb 25, 2023
Malicious code in selfpostver (PyPI)
- Feb 25, 2023
Malicious code in py-splitgrand (PyPI)
- Feb 25, 2023
Malicious code in libintelpyw (PyPI)
- Feb 25, 2023
Malicious code in libencodenvidia (PyPI)
- Feb 25, 2023
Malicious code in esqrepy (PyPI)
- Feb 25, 2023
Malicious code in selfrecpu (PyPI)
- Feb 25, 2023
Malicious code in selfpyver (PyPI)
- Feb 25, 2023
Malicious code in selfposthydra (PyPI)
- Feb 25, 2023
Malicious code in selfgametool (PyPI)
- Feb 25, 2023
Malicious code in libstudypyw (PyPI)
- Feb 25, 2023
Malicious code in selfcpusplit (PyPI)
- Feb 25, 2023
Malicious code in py-cpucandy (PyPI)
- Feb 25, 2023
Malicious code in esqpywload (PyPI)
- Feb 25, 2023
Malicious code in esqpushstudy (PyPI)
- Feb 25, 2023
Malicious code in py-virtualpaypal (PyPI)
- Feb 25, 2023
Malicious code in libpaypalmc (PyPI)
- Feb 25, 2023
Malicious code in esqpywcv (PyPI)
- Feb 25, 2023
Malicious code in esqpeppost (PyPI)
- Feb 25, 2023
Malicious code in py-pullpy (PyPI)
- Feb 25, 2023
Malicious code in esqnvidiasplit (PyPI)
- Feb 25, 2023
Malicious code in selfstudytool (PyPI)
- Feb 25, 2023
Malicious code in selfvmreplace (PyPI)
- Feb 25, 2023
Malicious code in selfrandomram (PyPI)
- Feb 25, 2023
Malicious code in selfhttppyw (PyPI)
- Feb 25, 2023
Malicious code in tppepultra (PyPI)
- Feb 25, 2023
Malicious code in libverpy (PyPI)
- Feb 25, 2023
Malicious code in libultraget (PyPI)
- Feb 25, 2023
Malicious code in esqintelosint (PyPI)
- Feb 25, 2023
Malicious code in esqcpupy (PyPI)
- Feb 25, 2023
Malicious code in selfurlcpu (PyPI)
- Feb 25, 2023
Malicious code in esqccmask (PyPI)
- Feb 25, 2023
Malicious code in selfinforandom (PyPI)
- Feb 25, 2023
Malicious code in libproofpong (PyPI)
- Feb 25, 2023
Malicious code in selfhydramask (PyPI)
- Feb 25, 2023
Malicious code in py-getcandy (PyPI)
- Feb 25, 2023
Malicious code in tppepsplit (PyPI)
- Feb 25, 2023
Malicious code in selflibcv (PyPI)
- Feb 25, 2023
Malicious code in tpvmpy (PyPI)
- Feb 25, 2023
Malicious code in py-grandstr (PyPI)
- Feb 25, 2023
Malicious code in libosintkill (PyPI)
- Feb 25, 2023
Malicious code in selfsplitpush (PyPI)
- Feb 25, 2023
Malicious code in selfpostmc (PyPI)
- Feb 25, 2023
Malicious code in libvisainfo (PyPI)
- Feb 25, 2023
Malicious code in librandompush (PyPI)
- Feb 25, 2023
Malicious code in tploadpep (PyPI)
- Feb 25, 2023
Malicious code in tpgamepip (PyPI)
- Feb 25, 2023
Malicious code in py-rere (PyPI)
- Feb 25, 2023
Malicious code in esqpaypalhydra (PyPI)
- Feb 25, 2023
Malicious code in selfultracraft (PyPI)
Page 428 of 479