Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Aug 28, 2025
Malicious code in peloton-client123 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in peew (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in numbervalidator (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in nofexhack (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in nofex-hack (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in nexlang (PyPI)
4 compromised versions
- Aug 28, 2025
Malicious code in newdontinstallthistest (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-sql (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-requests-module (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-requests-2021 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ncurses (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in namedpkg (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in mozilla (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in more-colors (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in malicious-pip-package-for-demo (PyPI)
3 compromised versions
- Aug 28, 2025
Malicious code in lyft-avidl (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in loy (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in logging-python (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in lightfm-ext (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in kfaction (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in jinja22 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ironic-secureboot-driver (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in iou3d (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ilovemadpussy9 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in http-interact (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hironobunigo (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hera-mapmaking-visibilitysimulation (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hellowpkg (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in gearbest-parser (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in gauravtest123 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in fquant (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in flyadmin (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in floogle (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in fiinquantx (PyPI)
6 compromised versions
- Aug 28, 2025
Malicious code in fiinquant-test (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in fiinquant (PyPI)
4 compromised versions
- Aug 28, 2025
Malicious code in fet (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in easy-https (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in e89-security (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in doughnuts (PyPI)
10 compromised versions
- Aug 28, 2025
Malicious code in dns-lexiconrequests-mock (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in discord-selfbot-v1422 (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in discord-application (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in deepmountains-rce (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in decoratoroperations (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in dccs-bot (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ctf-q21-empire-tmp-test125 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ctf-q21-empire-tmp-test124 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ctf-q21-empire-tmp-test123 (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in ctf-q21-empire-tmp-t0pw1ns (PyPI)
1 compromised version
Page 279 of 479