Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Dec 9, 2024
Malicious code in colority (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in cipherbcrypto (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in ccl-localstoragerss (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in ccl-localstoragers (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbases (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbase (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in bugbounty (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in artifact-lab-3-package-0c8bce1c (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in arielbogo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in akobo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in aiocpa (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afritonpy (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in afriton-py (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afriton (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afrit-name (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in 48484efej8id (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in intgraphx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in graphicsx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in flamepro (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in dbsxrchpro (PyPI)
1 compromised version
- Dec 4, 2024
Malicious code in huggingleg2 (PyPI)
1 compromised version
- Dec 3, 2024
Malicious code in genz-translator (PyPI)
20 compromised versions
- Dec 1, 2024
Malicious code in my-service-manager (PyPI)
8 compromised versions
- Dec 1, 2024
Malicious code in my-main-manager (PyPI)
4 compromised versions
- Dec 1, 2024
Malicious code in foop (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in datagov-harvester (PyPI)
2 compromised versions
- Dec 1, 2024
Malicious code in crowdstrike-foundry (PyPI)
3 compromised versions
- Dec 1, 2024
Malicious code in bancor-simulation (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in auth0-open-source-template (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in apache-airflow-providers-edge (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in omigo-data-analytics (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in pycryptographylibv3 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in pipcolorpkgv2 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in newpackagetest2025 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in newpackagetest2024 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in christmasmiraclemaker (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calctestchristmas (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calcnotepad (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calccc (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calc123lorc (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bettercolorstesting (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever3 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever2 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in nirohf-reverse-shell (PyPI)
2 compromised versions
- Nov 29, 2024
Malicious code in driftme (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in catme (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in trove4j (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in shoots-flutter (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in shoots-api-test (PyPI)
1 compromised version
Page 298 of 479