Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 5, 2025
Malicious code in inkpy-jinja (PyPI)
1 compromised version
- Feb 5, 2025
Malicious code in hellohackers (PyPI)
1 compromised version
- Feb 4, 2025
Malicious code in farooq4321 (PyPI)
1 compromised version
- Feb 4, 2025
Malicious code in requests-x64 (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in xmsgpy (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in web3-eth (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in utils-pencaws (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in utils-hex (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in utils-eth (PyPI)
6 compromised versions
- Feb 3, 2025
Malicious code in tonvia (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in tonki (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in toneo (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in tan1-0 (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in tan1 (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in shoots-bynet (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in shinel (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in shelley (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in sajodecrypto (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in sajadninja-sajad (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in sajadninja (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in sajadnewninja (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in sajadnewenc (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in reqest-dexfree (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in pylint-redis (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in pyethereum2345 (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in pyethereum (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in prime-math (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in petace (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in newencsajad (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in lransrlasn (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in langer-update (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in hhxy (PyPI)
5 compromised versions
- Feb 3, 2025
Malicious code in fgh (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in eth-web3 (PyPI)
3 compromised versions
- Feb 3, 2025
Malicious code in devilfree (PyPI)
3 compromised versions
- Feb 3, 2025
Malicious code in devilcore (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in bytedance-chat (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in bugscanx (PyPI)
12 compromised versions
- Feb 3, 2025
Malicious code in breqest (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in alrsnlaseast (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in account-eth (PyPI)
2 compromised versions
- Feb 2, 2025
Malicious code in novatwo (PyPI)
1 compromised version
- Feb 1, 2025
Malicious code in web3imports (PyPI)
1 compromised version
- Feb 1, 2025
Malicious code in asynchelpers (PyPI)
1 compromised version
- Jan 26, 2025
Malicious code in markitanalysis (PyPI)
2 compromised versions
- Jan 26, 2025
Malicious code in getpublicip (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in rqsts (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesttss (PyPI)
2 compromised versions
- Jan 25, 2025
Malicious code in requestsa (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesra (PyPI)
1 compromised version
Page 295 of 479