Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Apr 20, 2025
Malicious code in pyapiepo (PyPI)
2 compromised versions
- Apr 12, 2025
Malicious code in colorona (PyPI)
1 compromised version
- Apr 10, 2025
Malicious code in colorina (PyPI)
11 compromised versions
- Apr 5, 2025
Malicious code in hyper-request (PyPI)
1 compromised version
- Apr 4, 2025
Malicious code in ultrafasttelethon (PyPI)
4 compromised versions
- Apr 4, 2025
Malicious code in fastgram (PyPI)
1 compromised version
- Apr 4, 2025
Malicious code in fastertelethon (PyPI)
2 compromised versions
- Apr 3, 2025
Malicious code in colorinsa (PyPI)
1 compromised version
- Apr 2, 2025
Malicious code in flask-auth-system (PyPI)
2 compromised versions
- Apr 2, 2025
Malicious code in flask-auth-sys (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in sccket (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in runwifi (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in runningwifi (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in randomwifi (PyPI)
1 compromised version
- Mar 30, 2025
Malicious code in bitcoinlibdbfix (PyPI)
7 compromised versions
- Mar 30, 2025
Malicious code in bitcoinlib-dev (PyPI)
6 compromised versions
- Mar 28, 2025
Malicious code in textgradient (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in ytest-cov (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in utilmy (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in twilio-rest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in torahbiblecodes (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in tempeh (PyPI)
4 compromised versions
- Mar 28, 2025
Malicious code in sphinxcontrib-napolean (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in solscan (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in slide-tc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ska-low-cbf-fpga (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in shleeh (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in requests-wiki (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in random-00013 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyscf-fciqmc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyroforktgcrypto-pyrofork (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pydantic-kit (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pychaosvm (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in piauthorizer (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pgmysql (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pandaspytest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in opera2d (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in omnigodz-random (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in multiopython (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in msgspec-python313-pre (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in license-txt (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in libmelee (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in lalpulsar (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ignore-ssl (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in gmpykit (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in flaskignoressl (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in fenics-dolfinx (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in execjs (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in eth-defi (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in django-storage (PyPI)
1 compromised version
Page 291 of 479