Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Aug 13, 2025
Malicious code in pycrackhash (PyPI)
2 compromised versions
- Aug 12, 2025
Malicious code in iamenumer (PyPI)
1 compromised version
- Aug 12, 2025
Malicious code in aws-enumerate (PyPI)
1 compromised version
- Aug 12, 2025
Malicious code in kertash (PyPI)
2 compromised versions
- Aug 11, 2025
Malicious code in flask-tdg-cyber (PyPI)
11 compromised versions
- Aug 10, 2025
Malicious code in tronapihelper (PyPI)
1 compromised version
- Aug 9, 2025
Malicious code in permsupping (PyPI)
1 compromised version
- Aug 8, 2025
Malicious code in w3shi-h1 (PyPI)
3 compromised versions
- Aug 8, 2025
Malicious code in packed-w3shi (PyPI)
1 compromised version
- Aug 7, 2025
Malicious code in raknet-testing-package2 (PyPI)
3 compromised versions
- Aug 7, 2025
Malicious code in raknet-testing-package (PyPI)
6 compromised versions
- Aug 6, 2025
Malicious code in tronapisync (PyPI)
4 compromised versions
- Aug 6, 2025
Malicious code in httpsyncer (PyPI)
1 compromised version
- Aug 5, 2025
Malicious code in flashsimplelogger (PyPI)
2 compromised versions
- Aug 5, 2025
Malicious code in trongridapi (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in discordsync (PyPI)
2 compromised versions
- Aug 4, 2025
Malicious code in bh-25-req-ase (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestz (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in zhopaorlaaato (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in sisaws (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in thisisthedaventest (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in totallysafe (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsodelib (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in dziplib (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsidelib (PyPI)
15 compromised versions
- Aug 3, 2025
Malicious code in secmeasure (PyPI)
3 compromised versions
- Aug 2, 2025
Malicious code in supersafepackage (PyPI)
10 compromised versions
- Aug 2, 2025
Malicious code in bh-usa-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in bh-usa-automate-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in tsesyx (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in web3dummycti (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-ase-automate (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-pre-automate (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-pre-automate1 (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in loggerex (PyPI)
3 compromised versions
- Aug 1, 2025
Malicious code in supersafereverse (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in loquru (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-dooorto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in num2words (PyPI)
2 compromised versions
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
1 compromised version
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
1 compromised version
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
- Jul 31, 2025
Malicious code in zlsrc (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in zlapp (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in zipf (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ziggonext (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in wallets-utils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in utils-wallet (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in tulipgui-python (PyPI)
1 compromised version
Page 282 of 479