Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 25, 2023
Malicious code in tprandcandy (PyPI)
- Feb 25, 2023
Malicious code in selfreplacesplit (PyPI)
- Feb 25, 2023
Malicious code in py-ramhacked (PyPI)
- Feb 25, 2023
Malicious code in py-lgtbrand (PyPI)
- Feb 25, 2023
Malicious code in libvmmc (PyPI)
- Feb 25, 2023
Malicious code in tppaypalsuper (PyPI)
- Feb 25, 2023
Malicious code in selfintsuper (PyPI)
- Feb 25, 2023
Malicious code in libhttpkill (PyPI)
- Feb 25, 2023
Malicious code in esqrandominfo (PyPI)
- Feb 25, 2023
Malicious code in esqproofproof (PyPI)
- Feb 25, 2023
Malicious code in esqkillstring (PyPI)
- Feb 25, 2023
Malicious code in tpvercontrol (PyPI)
- Feb 25, 2023
Malicious code in py-stringrandom (PyPI)
- Feb 25, 2023
Malicious code in py-killnvidia (PyPI)
- Feb 25, 2023
Malicious code in py-httpencode (PyPI)
- Feb 25, 2023
Malicious code in libhackedcv (PyPI)
- Feb 25, 2023
Malicious code in py-repull (PyPI)
- Feb 25, 2023
Malicious code in libhackedstr (PyPI)
- Feb 25, 2023
Malicious code in esqstringnvidia (PyPI)
- Feb 25, 2023
Malicious code in tpultrainfo (PyPI)
- Feb 25, 2023
Malicious code in py-rever (PyPI)
- Feb 25, 2023
Malicious code in libreplacepong (PyPI)
- Feb 25, 2023
Malicious code in libintelram (PyPI)
- Feb 25, 2023
Malicious code in py-grandre (PyPI)
- Feb 25, 2023
Malicious code in libkillcandy (PyPI)
- Feb 25, 2023
Malicious code in selflgtbpep (PyPI)
- Feb 25, 2023
Malicious code in esqintelpush (PyPI)
- Feb 25, 2023
Malicious code in libreplaceintel (PyPI)
- Feb 25, 2023
Malicious code in selfmaskvisa (PyPI)
- Feb 25, 2023
Malicious code in py-randreplace (PyPI)
- Feb 25, 2023
Malicious code in py-hydramc (PyPI)
- Feb 25, 2023
Malicious code in libmaskver (PyPI)
- Feb 25, 2023
Malicious code in libcraftosint (PyPI)
- Feb 25, 2023
Malicious code in libcandystr (PyPI)
- Feb 25, 2023
Malicious code in tposintvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpmcvirtual (PyPI)
- Feb 25, 2023
Malicious code in tpcandypong (PyPI)
- Feb 25, 2023
Malicious code in selfhackedlib (PyPI)
- Feb 25, 2023
Malicious code in py-httppong (PyPI)
- Feb 25, 2023
Malicious code in libsupervisa (PyPI)
- Feb 25, 2023
Malicious code in tppywstudy (PyPI)
- Feb 25, 2023
Malicious code in selfstrpyw (PyPI)
- Feb 25, 2023
Malicious code in py-studypaypal (PyPI)
- Feb 25, 2023
Malicious code in libkillstring (PyPI)
- Feb 25, 2023
Malicious code in esqguipong (PyPI)
- Feb 25, 2023
Malicious code in selfultramc (PyPI)
- Feb 25, 2023
Malicious code in libreplaceultra (PyPI)
- Feb 25, 2023
Malicious code in libmcmine (PyPI)
- Feb 25, 2023
Malicious code in libcpupep (PyPI)
- Feb 25, 2023
Malicious code in esqccvirtual (PyPI)
Page 430 of 479