Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,620 total in pypi · sorted newest first- May 31, 2024
Malicious code in numberpy (PyPI)
1 compromised version
- May 31, 2024
Malicious code in reqwestss (PyPI)
1 compromised version
- May 25, 2024
Malicious code in discord-react (PyPI)
3 compromised versions
- May 14, 2024
Malicious code in testpkg3322 (PyPI)
1 compromised version
- May 6, 2024
Malicious code in multiconnections (PyPI)
5 compromised versions
- May 5, 2024
Malicious code in threadxpools (PyPI)
2 compromised versions
- Apr 11, 2024
Malicious code in reqargs (PyPI)
3 compromised versions
- Apr 4, 2024
Malicious code in lyft-core (PyPI)
1 compromised version
- Mar 27, 2024
Malicious code in sparklog (PyPI)
1 compromised version
- Mar 27, 2024
Malicious code in types-for-adobe (PyPI)
2 compromised versions
- Mar 24, 2024
Malicious code in google-requests (PyPI)
1 compromised version
- Mar 23, 2024
Malicious code in lyft-service (PyPI)
1 compromised version
- Mar 18, 2024
Malicious code in business-kpi-manager (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in cert-orchestration-adapter (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in mle-py-connector (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-stats (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-exceptions (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-settings (PyPI)
1 compromised version
- Mar 17, 2024
Malicious code in lyft-requests (PyPI)
1 compromised version
- Mar 8, 2024
Malicious code in booto3 (PyPI)
1 compromised version
- Mar 2, 2024
Malicious code in pyalicet (PyPI)
2 compromised versions
- Feb 23, 2024
Malicious code in djanggo (PyPI)
2 compromised versions
- Dec 25, 2023
Malicious code in multicolored (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in vibrant (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in richcolor (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in excaliburx (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in enchantv (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2027 (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2028 (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2026 (PyPI)
1 compromised version
- Dec 1, 2023
Malicious code in lodestone (PyPI)
4 compromised versions
- Nov 22, 2023
Malicious code in azureml-contrib-daskonbatch (PyPI)
1 compromised version
- Nov 22, 2023
Malicious code in yelp-cgeom1 (PyPI)
1 compromised version
- Nov 18, 2023
Malicious code in discomusic (PyPI)
1 compromised version
- Oct 23, 2023
Malicious code in fbdebug (PyPI)
1 compromised version
- Oct 13, 2023
Malicious code in tencent-cloud-python-sdk (PyPI)
- Oct 13, 2023
Malicious code in python-alibabacloud-tea-openapi (PyPI)
- Oct 13, 2023
Malicious code in python-alibabacloud-sdk-core (PyPI)
- Oct 13, 2023
Malicious code in enumerate-iam-aws (PyPI)
- Oct 13, 2023
Malicious code in aws-enumerate-iam (PyPI)
- Oct 13, 2023
Malicious code in alisdkcore (PyPI)
- Oct 13, 2023
Malicious code in alibabacloud-oss2 (PyPI)
- Oct 9, 2023
Malicious code in cephlib (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in xmlbuilder3 (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in narratives-from-tweets (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in liblapack-dev (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in libblas3 (PyPI)
1 compromised version
- Oct 9, 2023
Malicious code in liblapack3 (PyPI)
1 compromised version
- Oct 5, 2023
Malicious code in pyefflorer (PyPI)
1 compromised version
Page 103 of 233