Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in exporter-stackdriver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exorigsim (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in extra-huggingface (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in extracolorsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in example-pypi-package-loler1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in extrazip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exodushcate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ezauto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exo-steal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in executor-http (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in expkg-am (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exflibrary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in example-vizsla-tutorial (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in executor-engine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exodusdecoderss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in exodusdecoders (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in execjs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etlisalat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ewb3-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ewbsocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ettherium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-pkg1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-rce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethrpc-keys (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-rce2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evillib-cli-demo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-pkg2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evilshield (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethtoolz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in eutherium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in example-package-taxi-etl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evm-validator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-select-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evannlegoat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etnsorflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in evil-py-argo-shell (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethrum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethreum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etherriuumm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethherium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etherreeum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethreeum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etheruem (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etherun (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etheruim (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in etheum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethertoolz (PyPI)
1 compromised version
Page 191 of 480