Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in colorate-raimbow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloraa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloraiz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in color-list (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in color-animated (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colorama-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in color-vividpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in collects (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramka (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colorahma (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in color-settings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colopym2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramae (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramah (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramaz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramapkgs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramapkgsdow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramapkgsw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colomara (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloramaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colorame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in color-fade (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in collorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin-grave (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colarama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in collectables (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colarise (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colargs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colaroma (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colimer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colarg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coinanalysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coloarma (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in collecters (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colarama-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colarify (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coingenerator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coinmate-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coinanalyze (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin-codes-pro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in codeoptimizer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in codigosintaxis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in code-transfering-3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin-codes-net2 (PyPI)
1 compromised version
Page 227 of 480