Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Aug 24, 2025
Malicious code in editidle (PyPI)
1 compromised version
- Aug 24, 2025
Malicious code in kimportsetup (PyPI)
1 compromised version
- Aug 23, 2025
Malicious code in anrok (PyPI)
1 compromised version
- Aug 23, 2025
Malicious code in anrk (PyPI)
1 compromised version
- Aug 23, 2025
Malicious code in initialtestingdonotpull1235 (PyPI)
1 compromised version
- Aug 23, 2025
Malicious code in py-sys-utils (PyPI)
2 compromised versions
- Aug 23, 2025
Malicious code in selenium-stealth-helper (PyPI)
6 compromised versions
- Aug 23, 2025
Malicious code in electrum-bch (PyPI)
5 compromised versions
- Aug 22, 2025
Malicious code in nukebount (PyPI)
1 compromised version
- Aug 22, 2025
Malicious code in nukeport (PyPI)
1 compromised version
- Aug 22, 2025
Malicious code in seclab-research-depconf-test-2 (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in tronpropy (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in hacktool (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in vcdiff-py (PyPI)
2 compromised versions
- Aug 21, 2025
Malicious code in lolcrazy (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in importsetup (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in python-ledgercommon (PyPI)
15 compromised versions
- Aug 21, 2025
Malicious code in etherweb3 (PyPI)
4 compromised versions
- Aug 21, 2025
Malicious code in django-aerospike-sessions (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in medoen (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in pacakegenow (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in woowoowo (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in k7eeel (PyPI)
1 compromised version
- Aug 21, 2025
Malicious code in k7eela (PyPI)
3 compromised versions
- Aug 21, 2025
Malicious code in k7eel2-ss (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in cffi-curl (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in my-first-pypi-demo (PyPI)
4 compromised versions
- Aug 20, 2025
Malicious code in python-amazon-doc-utils (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in hashstation (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in nukecount (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in randar303 (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in buildpeople (PyPI)
1 compromised version
- Aug 20, 2025
Malicious code in noonutil (PyPI)
6 compromised versions
- Aug 20, 2025
Malicious code in k7eel (PyPI)
4 compromised versions
- Aug 19, 2025
Malicious code in tronlinknet (PyPI)
1 compromised version
- Aug 19, 2025
Malicious code in tronwalletpy (PyPI)
1 compromised version
- Aug 19, 2025
Malicious code in caas-jupyter-tools (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in binance-sdk-ebate (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in flatfox-api-python (PyPI)
3 compromised versions
- Aug 18, 2025
Malicious code in svcmanagement (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in swiv (PyPI)
4 compromised versions
- Aug 17, 2025
Malicious code in flask-tdg-cyberx (PyPI)
5 compromised versions
- Aug 17, 2025
Malicious code in pytensorlite (PyPI)
5 compromised versions
- Aug 15, 2025
Malicious code in titifel-pyip (PyPI)
3 compromised versions
- Aug 15, 2025
Malicious code in libgomp (PyPI)
6 compromised versions
- Aug 14, 2025
Malicious code in iamenumerate (PyPI)
2 compromised versions
- Aug 14, 2025
Malicious code in jsonist (PyPI)
1 compromised version
- Aug 14, 2025
Malicious code in titifel-pypi (PyPI)
6 compromised versions
- Aug 14, 2025
Malicious code in browser-run (PyPI)
3 compromised versions
- Aug 13, 2025
Malicious code in st-py-de-cli (PyPI)
1 compromised version
Page 281 of 479