Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,211 total · sorted newest first- Feb 26, 2023
Malicious code in py-pingstringpaypal (PyPI)
- Feb 26, 2023
Malicious code in py-mcosintmc (PyPI)
- Feb 26, 2023
Malicious code in py-infomcpy (PyPI)
- Feb 26, 2023
Malicious code in libosintnvidiapull (PyPI)
- Feb 26, 2023
Malicious code in esqhydraedcc (PyPI)
- Feb 26, 2023
Malicious code in tpvisaguipost (PyPI)
- Feb 26, 2023
Malicious code in tposintcraftram (PyPI)
- Feb 26, 2023
Malicious code in py-vmcvram (PyPI)
- Feb 26, 2023
Malicious code in py-urlhydrakill (PyPI)
- Feb 26, 2023
Malicious code in libsuperkilllib (PyPI)
- Feb 26, 2023
Malicious code in esqgetcontrolpost (PyPI)
- Feb 26, 2023
Malicious code in tppywintelgame (PyPI)
- Feb 26, 2023
Malicious code in selfmcpipcpu (PyPI)
- Feb 26, 2023
Malicious code in libvisaintinfo (PyPI)
- Feb 26, 2023
Malicious code in libcvcontrolhydra (PyPI)
- Feb 26, 2023
Malicious code in esqvirtualedhacked (PyPI)
- Feb 26, 2023
Malicious code in esqcpuguilgtb (PyPI)
- Feb 26, 2023
Malicious code in tpguicontrolcv (PyPI)
- Feb 26, 2023
Malicious code in py-paypalsplitsplit (PyPI)
- Feb 26, 2023
Malicious code in esqedencodeurl (PyPI)
- Feb 26, 2023
Malicious code in tppywproofcpu (PyPI)
- Feb 26, 2023
Malicious code in selfultrapingpush (PyPI)
- Feb 26, 2023
Malicious code in selfgamecvultra (PyPI)
- Feb 26, 2023
Malicious code in py-killtoolad (PyPI)
- Feb 26, 2023
Malicious code in py-ccstringpost (PyPI)
- Feb 26, 2023
Malicious code in esqencodepaypalpong (PyPI)
- Feb 26, 2023
Malicious code in selflgtbstringload (PyPI)
- Feb 26, 2023
Malicious code in py-replacepushinfo (PyPI)
- Feb 26, 2023
Malicious code in libcraftcandyrandom (PyPI)
- Feb 26, 2023
Malicious code in esqmaskcpuhacked (PyPI)
- Feb 26, 2023
Malicious code in selfpywpaypalultra (PyPI)
- Feb 26, 2023
Malicious code in selfloadedpy (PyPI)
- Feb 26, 2023
Malicious code in libcontrolinfostr (PyPI)
- Feb 26, 2023
Malicious code in esqosintvisaget (PyPI)
- Feb 26, 2023
Malicious code in tprandguilib (PyPI)
- Feb 26, 2023
Malicious code in tploadreplacestring (PyPI)
- Feb 26, 2023
Malicious code in tpcrafthydracandy (PyPI)
- Feb 26, 2023
Malicious code in selfhttpsplited (PyPI)
- Feb 26, 2023
Malicious code in libcontrolguipyw (PyPI)
- Feb 26, 2023
Malicious code in esqstringtoolint (PyPI)
- Feb 26, 2023
Malicious code in esqsplitpeptool (PyPI)
- Feb 26, 2023
Malicious code in tprampingload (PyPI)
- Feb 26, 2023
Malicious code in py-proofccmask (PyPI)
- Feb 26, 2023
Malicious code in libpeplgtbinfo (PyPI)
- Feb 26, 2023
Malicious code in selfmineultraram (PyPI)
- Feb 26, 2023
Malicious code in esqmaskpepget (PyPI)
- Feb 26, 2023
Malicious code in tppushcpucandy (PyPI)
- Feb 26, 2023
Malicious code in selfvisaurlpong (PyPI)
- Feb 26, 2023
Malicious code in tpvervmsplit (PyPI)
- Feb 26, 2023
Malicious code in tpreplacecrafthacked (PyPI)
Page 6898 of 7,305