Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,211 total · sorted newest first- Feb 27, 2023
Malicious code in tppipcraftad (PyPI)
- Feb 27, 2023
Malicious code in selfsuperstrpaypal (PyPI)
- Feb 27, 2023
Malicious code in selfsuperedping (PyPI)
- Feb 27, 2023
Malicious code in tpcandyminead (PyPI)
- Feb 27, 2023
Malicious code in selfgetminecandy (PyPI)
- Feb 27, 2023
Malicious code in libloadhackedpyw (PyPI)
- Feb 27, 2023
Malicious code in esqloadencodeosint (PyPI)
- Feb 27, 2023
Malicious code in py-postultrahacked (PyPI)
- Feb 27, 2023
Malicious code in tppywpaypalgui (PyPI)
- Feb 27, 2023
Malicious code in tposinthydrapip (PyPI)
- Feb 27, 2023
Malicious code in selfvmintproof (PyPI)
- Feb 27, 2023
Malicious code in selfpostramurl (PyPI)
- Feb 27, 2023
Malicious code in selfurlmcstr (PyPI)
- Feb 27, 2023
Malicious code in selfmaskpaypalpip (PyPI)
- Feb 27, 2023
Malicious code in libsuperregrand (PyPI)
- Feb 27, 2023
Malicious code in libnvidiamcad (PyPI)
- Feb 27, 2023
Malicious code in esqedstudynvidia (PyPI)
- Feb 27, 2023
Malicious code in tpk-fca (npm)
- Feb 27, 2023
Malicious code in fca-tpk-vip (npm)
- Feb 27, 2023
Malware in tpk-fca
1 compromised version
- Feb 27, 2023
Malware in fca-tpk-vip
1 compromised version
- Feb 27, 2023
Malicious code in fca-kenlie-plays (npm)
- Feb 27, 2023
Malware in fca-kenlie-plays
1 compromised version
- Feb 27, 2023
Malicious code in selfsupertoolcontrol (PyPI)
- Feb 27, 2023
Malicious code in tppyencodepull (PyPI)
- Feb 27, 2023
Malicious code in tpintelpepcraft (PyPI)
- Feb 27, 2023
Malicious code in py-randomlibpong (PyPI)
- Feb 27, 2023
Malicious code in libpaypalhackedlgtb (PyPI)
- Feb 27, 2023
Malicious code in esqgrandhttpreplace (PyPI)
- Feb 27, 2023
Malicious code in tpvmstringgrand (PyPI)
- Feb 27, 2023
Malicious code in tpmaskencodehacked (PyPI)
- Feb 27, 2023
Malicious code in tpkillkillsplit (PyPI)
- Feb 27, 2023
Malicious code in selfmaskintelpong (PyPI)
- Feb 27, 2023
Malicious code in py-ultracpustudy (PyPI)
- Feb 27, 2023
Malicious code in py-maskprooftool (PyPI)
- Feb 27, 2023
Malicious code in libcontrolpyinfo (PyPI)
- Feb 27, 2023
Malicious code in esqstrvirtualget (PyPI)
- Feb 27, 2023
Malicious code in esqinfocctool (PyPI)
- Feb 27, 2023
Malicious code in tpguiccpyw (PyPI)
- Feb 27, 2023
Malicious code in selfrandomcraftpong (PyPI)
- Feb 27, 2023
Malicious code in selframrandommask (PyPI)
- Feb 27, 2023
Malicious code in selfproofcvrand (PyPI)
- Feb 27, 2023
Malicious code in selfcraftpaypalultra (PyPI)
- Feb 27, 2023
Malicious code in py-proofrandreplace (PyPI)
- Feb 27, 2023
Malicious code in librandloadad (PyPI)
- Feb 27, 2023
Malicious code in libadproofver (PyPI)
- Feb 27, 2023
Malicious code in esqpaypallgtbint (PyPI)
- Feb 27, 2023
Malicious code in esqloadrandsplit (PyPI)
- Feb 27, 2023
Malicious code in tpverguipost (PyPI)
- Feb 27, 2023
Malicious code in tprepullpush (PyPI)
Page 6882 of 7,305