Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 31, 2025
Malicious code in fastybird-devices-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in exorigsim (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ensmallen-graph (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in duc193 (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ds-lime (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in dfshoesadsm (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in deeprce (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in crawl-requests (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in cppython-core (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in common-test (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in chalk-harness (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in celery-flower (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in catchmeoutsidehawbade (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in carpentry-ci (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bunzbar (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in broccoli-server (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in boto3-batch-utils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bmlx-openapi-client (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bluesadway (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in blackspammerbd-termux (PyPI)
2 compromised versions
- Jul 31, 2025
Malicious code in bitranox-coloredlogs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bioformats (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bavard-ml-common (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisherman (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisher (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aistac-foundation (PyPI)
1 compromised version
- Jul 31, 2025
After a successful phishing attack, new versions of `num2words` were published containing malware.
2 compromised versions
- Jul 31, 2025
Malicious code in prof-tg-to-qu (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in prof-tg-go-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-gjho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-gdghho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-dggrto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in backtradingbot (PyPI)
5 compromised versions
- Jul 30, 2025
Malicious code in trongridperm (PyPI)
1 compromised version
- Jul 30, 2025
Malicious code in flatfox-api (PyPI)
6 compromised versions
- Jul 30, 2025
Malicious code in maxload (PyPI)
3 compromised versions
- Jul 29, 2025
Malicious code in someeebbb (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in triple-equal (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in testing123kk (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest3 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest2 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in greater-than (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in requires-python (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in supersafecalc (PyPI)
3 compromised versions
- Jul 28, 2025
Malicious code in treeherder-submitter (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in triple-equals (PyPI)
2 compromised versions
- Jul 27, 2025
Malicious code in hello-from-shiphero (PyPI)
1 compromised version
- Jul 26, 2025
Malicious code in prof-qux (PyPI)
4 compromised versions
- Jul 26, 2025
Malicious code in foundry-jupyter-extension (PyPI)
5 compromised versions
- Jul 25, 2025
Malicious code in prof-qx (PyPI)
5 compromised versions
Page 284 of 479