Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,211 total · sorted newest first- Feb 27, 2023
Malicious code in esqnvidiapaypalmask (PyPI)
- Feb 27, 2023
Malicious code in py-pepminepy (PyPI)
- Feb 27, 2023
Malicious code in esqtoolultralgtb (PyPI)
- Feb 27, 2023
Malicious code in libsuperintram (PyPI)
- Feb 27, 2023
Malicious code in libstrpushkill (PyPI)
- Feb 27, 2023
Malicious code in esqverinfostr (PyPI)
- Feb 27, 2023
Malicious code in py-proofsplitpy (PyPI)
- Feb 27, 2023
Malicious code in libvisacvcontrol (PyPI)
- Feb 27, 2023
Malicious code in tpramcced (PyPI)
- Feb 27, 2023
Malicious code in tpadmaskcandy (PyPI)
- Feb 27, 2023
Malicious code in libhackedkillcontrol (PyPI)
- Feb 27, 2023
Malicious code in selfcraftpipvirtual (PyPI)
- Feb 27, 2023
Malicious code in esqpullcraftlgtb (PyPI)
- Feb 27, 2023
Malicious code in esqgameultracandy (PyPI)
- Feb 27, 2023
Malicious code in tppullccre (PyPI)
- Feb 27, 2023
Malicious code in tppostreplacevisa (PyPI)
- Feb 27, 2023
Malicious code in selfproofhttpsplit (PyPI)
- Feb 27, 2023
Malicious code in tppeppullintel (PyPI)
- Feb 27, 2023
Malicious code in selfrandsplitre (PyPI)
- Feb 27, 2023
Malicious code in selfpullrecontrol (PyPI)
- Feb 27, 2023
Malicious code in esqedpypy (PyPI)
- Feb 27, 2023
Malicious code in selfrandominfoping (PyPI)
- Feb 27, 2023
Malicious code in selfpullgamegame (PyPI)
- Feb 27, 2023
Malicious code in tpmaskpushre (PyPI)
- Feb 27, 2023
Malicious code in esqverpaypalsuper (PyPI)
- Feb 27, 2023
Malicious code in tposintponghydra (PyPI)
- Feb 27, 2023
Malicious code in selfpostultraultra (PyPI)
- Feb 27, 2023
Malicious code in selfnvidiapushhacked (PyPI)
- Feb 27, 2023
Malicious code in selfgrandkillhacked (PyPI)
- Feb 27, 2023
Malicious code in py-pullgrandinfo (PyPI)
- Feb 27, 2023
Malicious code in libloadurlrand (PyPI)
- Feb 27, 2023
Malicious code in esqsupergrandstr (PyPI)
- Feb 27, 2023
Malicious code in tpgrandreplacerand (PyPI)
- Feb 27, 2023
Malicious code in selfpingponggui (PyPI)
- Feb 27, 2023
Malicious code in py-lgtbpywhttp (PyPI)
- Feb 27, 2023
Malicious code in py-lgtbpyhacked (PyPI)
- Feb 27, 2023
Malicious code in py-adpaypalkill (PyPI)
- Feb 27, 2023
Malicious code in libinforampy (PyPI)
- Feb 27, 2023
Malicious code in libgrandrammc (PyPI)
- Feb 27, 2023
Malicious code in esqpushhttpad (PyPI)
- Feb 27, 2023
Malicious code in esqcvcraftmc (PyPI)
- Feb 27, 2023
Malicious code in tpsplitpaypalmask (PyPI)
- Feb 27, 2023
Malicious code in tploadgrandhttp (PyPI)
- Feb 27, 2023
Malicious code in selfvirtualstringvisa (PyPI)
- Feb 27, 2023
Malicious code in selfpostgamemc (PyPI)
- Feb 27, 2023
Malicious code in libintmccontrol (PyPI)
- Feb 27, 2023
Malicious code in esqintelrevirtual (PyPI)
- Feb 27, 2023
Malicious code in py-randvisavisa (PyPI)
- Feb 27, 2023
Malicious code in py-intpywcandy (PyPI)
- Feb 27, 2023
Malicious code in esqstrencodehacked (PyPI)
Page 6871 of 7,305