Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Mar 18, 2025
Malicious code in axonify (PyPI)
7 compromised versions
- Mar 17, 2025
Malicious code in xcepthttp (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in httpx-client (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in asynchttpx (PyPI)
1 compromised version
- Mar 12, 2025
Malicious code in tonetext (PyPI)
2 compromised versions
- Mar 10, 2025
Malicious code in ccxt-mexc-futures (PyPI)
5 compromised versions
- Mar 9, 2025
Malicious code in wiki-requests (PyPI)
3 compromised versions
- Mar 9, 2025
Malicious code in voipms-service (PyPI)
1 compromised version
- Mar 8, 2025
Malicious code in tlsclient3 (PyPI)
2 compromised versions
- Mar 8, 2025
Malicious code in heroku-tl (PyPI)
15 compromised versions
- Mar 5, 2025
Malicious code in colorizetext (PyPI)
5 compromised versions
- Mar 5, 2025
Malicious code in enquiry-exam (PyPI)
1 compromised version
- Mar 5, 2025
Malicious code in certifications (PyPI)
1 compromised version
- Mar 4, 2025
Malicious code in pythonhttp (PyPI)
2 compromised versions
- Mar 3, 2025
Malicious code in xuiniadb (PyPI)
10 compromised versions
- Mar 3, 2025
Malicious code in usvr-agent (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in useragents (PyPI)
2 compromised versions
- Mar 3, 2025
Malicious code in usar-agent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronyx (PyPI)
19 compromised versions
- Mar 3, 2025
Malicious code in tronx (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronwebpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpyweb (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpynet (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronnetpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronlinkpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in trongridpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in ransomware (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in randomuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in maliciouspkg (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in fakeuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in envvenuma (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in aurm-python-sdk (PyPI)
16 compromised versions
- Mar 3, 2025
Malicious code in aurm-desktop-client (PyPI)
4 compromised versions
- Mar 2, 2025
Malicious code in mirage-rce (PyPI)
1 compromised version
- Mar 2, 2025
Malicious code in marinff-test (PyPI)
8 compromised versions
- Mar 2, 2025
Malicious code in ctf-aio-tool (PyPI)
1 compromised version
- Mar 1, 2025
Malicious code in piedefender (PyPI)
1 compromised version
- Mar 1, 2025
Malicious code in pydefender (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in kgmicolors (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in serverkeeper-verifier (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in timekeeper-verifier (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in tcloud-python-test (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in credential-python-sdk (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in acloud-client (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in time-service-checker (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-test (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-analyzer (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-analysis (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-check-server-get (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-check-server (PyPI)
1 compromised version
Page 293 of 479