Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,620 total in pypi · sorted newest first- Oct 4, 2023
Malicious code in poc-nvk (PyPI)
1 compromised version
- Oct 4, 2023
Malicious code in nvkvictim-poc (PyPI)
1 compromised version
- Oct 3, 2023
Malicious code in pyhulul (PyPI)
1 compromised version
- Oct 2, 2023
Malicious code in pyjio (PyPI)
1 compromised version
- Sep 30, 2023
Malicious code in pyioler (PyPI)
1 compromised version
- Sep 26, 2023
Malicious code in pytasler (PyPI)
2 compromised versions
- Sep 26, 2023
Malicious code in pyalsogkert (PyPI)
- Sep 26, 2023
Malicious code in kokokoako (PyPI)
- Sep 25, 2023
Malicious code in pykokalalz (PyPI)
1 compromised version
- Sep 25, 2023
Malicious code in pyioapso (PyPI)
1 compromised version
- Sep 24, 2023
Malicious code in pyhjdddo (PyPI)
1 compromised version
- Sep 23, 2023
Malicious code in pytarlooko (PyPI)
- Sep 23, 2023
Malicious code in pyktrkatoo (PyPI)
1 compromised version
- Sep 22, 2023
Malicious code in pystallerer (PyPI)
1 compromised version
- Sep 22, 2023
Malicious code in pykooler (PyPI)
- Sep 21, 2023
Malicious code in telethon2 (PyPI)
- Sep 18, 2023
Malicious code in pyowler (PyPI)
1 compromised version
- Sep 18, 2023
Malicious code in pylioner (PyPI)
- Sep 17, 2023
Malicious code in pystob (PyPI)
- Sep 12, 2023
Malicious code in aws-consoler2 (PyPI)
- Sep 12, 2023
Malicious code in enumerate-iam (PyPI)
- Sep 11, 2023
Malicious code in aliababcloud-tea-openapi (PyPI)
- Sep 1, 2023
Malicious code in alibabacloud-vpc20180317 (PyPI)
- Sep 1, 2023
Malicious code in alibabacloud-ecs20180317 (PyPI)
- Aug 20, 2023
Malicious code in pyminor (PyPI)
1 compromised version
- Aug 17, 2023
Malicious code in pyjoul (PyPI)
1 compromised version
- Aug 16, 2023
Malicious code in python-aliyun-sdk-rds (PyPI)
- Aug 15, 2023
Malicious code in tencentcloud-python-sdk (PyPI)
- Aug 15, 2023
Malicious code in pyghoster (PyPI)
1 compromised version
- Aug 14, 2023
Malicious code in aliyun-oss2 (PyPI)
- Aug 14, 2023
Malicious code in python-aliyun-sdk-kms (PyPI)
- Aug 13, 2023
Malicious code in syns-knox-xss-allwhere (PyPI)
1 compromised version
- Aug 12, 2023
Malicious code in bobikssf (PyPI)
1 compromised version
- Aug 11, 2023
Malicious code in python-cos-sdk-v5 (PyPI)
- Aug 11, 2023
Malicious code in python-aliyun-sdk-core (PyPI)
- Aug 10, 2023
Malicious code in notsogood (PyPI)
1 compromised version
- Aug 10, 2023
Malicious code in python-aliyun-sdk-ecs (PyPI)
- Jul 30, 2023
Malicious code in pypiele (PyPI)
2 compromised versions
- Jul 12, 2023
Malicious code in barcodegeneratorqr (PyPI)
1 compromised version
- Jul 7, 2023
Malicious code in servantcord (PyPI)
1 compromised version
- Jul 1, 2023
Malicious code in pyjwtrequest (PyPI)
1 compromised version
- Jun 21, 2023
Malicious code in barcodeqrgen (PyPI)
1 compromised version
- Jun 19, 2023
Malicious code in arangodba (PyPI)
- Jun 18, 2023
Malicious code in dependency1338 (PyPI)
1 compromised version
- Jun 6, 2023
Malicious code in bytedtrace (PyPI)
9 compromised versions
- Jun 6, 2023
Malicious code in lalalaopti (PyPI)
- Jun 6, 2023
Malicious code in gogogolokl (PyPI)
- Jun 3, 2023
Malicious code in nagogypython (PyPI)
1 compromised version
- Jun 3, 2023
Malicious code in numpy-req (PyPI)
1 compromised version
- May 29, 2023
Malicious code in cxfreezepy (PyPI)
Page 104 of 233