Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,620 total in pypi · sorted newest first- May 13, 2023
Malicious code in pywool (PyPI)
2 compromised versions
- May 10, 2023
Malicious code in spammingsynonym (PyPI)
1 compromised version
- May 10, 2023
Malicious code in spammingsynonyms (PyPI)
1 compromised version
- May 10, 2023
Malicious code in httprequesting (PyPI)
1 compromised version
- May 10, 2023
Malicious code in smsobfuscate (PyPI)
1 compromised version
- May 10, 2023
Malicious code in spamsynonym (PyPI)
2 compromised versions
- May 10, 2023
Malicious code in iiris-new2 (PyPI)
1 compromised version
- May 9, 2023
Malicious code in iiris-new (PyPI)
1 compromised version
- May 9, 2023
Malicious code in test-test-test-leys-check (PyPI)
1 compromised version
- May 8, 2023
Malicious code in selfpyintpaypal (PyPI)
- May 8, 2023
Malicious code in selfcontrolloadload (PyPI)
- May 7, 2023
Malicious code in py-intellibint (PyPI)
- May 7, 2023
Malicious code in esqgameencodereplace (PyPI)
- May 7, 2023
Malicious code in libpipultravirtual (PyPI)
- May 5, 2023
Malicious code in sagemakertransformers (PyPI)
1 compromised version
- May 3, 2023
Malicious code in libtpu-nightly (PyPI)
1 compromised version
- Apr 30, 2023
Malicious code in kangpy (PyPI)
1 compromised version
- Apr 28, 2023
Malicious code in yc-as-client (PyPI)
1 compromised version
- Apr 27, 2023
Malicious code in roblopython (PyPI)
1 compromised version
- Apr 26, 2023
Malicious code in service-etl (PyPI)
1 compromised version
- Apr 26, 2023
Malicious code in taxi-etl (PyPI)
1 compromised version
- Apr 26, 2023
Malicious code in dmp-suite (PyPI)
1 compromised version
- Apr 26, 2023
Malicious code in example-package-taxi-etl (PyPI)
1 compromised version
- Apr 25, 2023
Malicious code in tucan-x (PyPI)
2 compromised versions
- Mar 12, 2023
Malicious code in rawrequest (PyPI)
- Mar 12, 2023
Malicious code in tpcraftcraftencode (PyPI)
- Mar 12, 2023
Malicious code in selfvisapaypalmine (PyPI)
- Mar 12, 2023
Malicious code in esqguiproofad (PyPI)
- Mar 12, 2023
Malicious code in selfmccontrolstudy (PyPI)
- Mar 12, 2023
Malicious code in py-controlpingcraft (PyPI)
- Mar 12, 2023
Malicious code in esqccpongcpu (PyPI)
- Mar 12, 2023
Malicious code in tpcvadlib (PyPI)
- Mar 12, 2023
Malicious code in libguireplaceram (PyPI)
- Mar 12, 2023
Malicious code in libguigrandmc (PyPI)
- Mar 12, 2023
Malicious code in esqccstringmask (PyPI)
- Mar 12, 2023
Malicious code in selfedgamestudy (PyPI)
- Mar 12, 2023
Malicious code in py-mcultracraft (PyPI)
- Mar 12, 2023
Malicious code in libpingreintel (PyPI)
- Mar 12, 2023
Malicious code in tpcvurlpong (PyPI)
- Mar 12, 2023
Malicious code in py-toolvmintel (PyPI)
- Mar 12, 2023
Malicious code in libpywvisavirtual (PyPI)
- Mar 12, 2023
Malicious code in esqproofpostvisa (PyPI)
- Mar 12, 2023
Malicious code in esqgetlibpyw (PyPI)
- Mar 12, 2023
Malicious code in libosintliblgtb (PyPI)
- Mar 12, 2023
Malicious code in esqtoolinfoultra (PyPI)
- Mar 10, 2023
Malicious code in esqrestrhttp (PyPI)
- Mar 10, 2023
Malicious code in esqnvidiamaskvirtual (PyPI)
- Mar 10, 2023
Malicious code in libpongcvvm (PyPI)
- Mar 9, 2023
Malicious code in py-replacestringcandy (PyPI)
- Mar 9, 2023
Malicious code in tphydratoolsplit (PyPI)
Page 106 of 233