Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Oct 16, 2024
Malicious code in pytoileur (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in python-consul2-hh (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pyspliter (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pysoltransfer (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in pysoltoken (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in pysigner (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pypackscraper (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in pycolorlib (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pycoloramade (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in py-solana-cli (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in ptmpl (PyPI)
13 compromised versions
- Oct 16, 2024
Malicious code in protoc (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in phantomdecoderss (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in phantomdecoders (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in pdsuax4 (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pdsuax (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in ml-linear-regression-lib (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in marshall (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in javier-vidal (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in h99ai (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in exodusdecoderss (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in exodusdecoders (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in eth-account-api (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in crytic-compilers (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in cryptoaitools (PyPI)
7 compromised versions
- Oct 16, 2024
Malicious code in class-py (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in cipherbcryptors (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in cipherbcryptor (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in calendar-extender (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in bughunter9 (PyPI)
20 compromised versions
- Oct 16, 2024
Malicious code in blypack (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoderss (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoders (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in artifact-lab-3-package-e90915e1 (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in aiogt (PyPI)
4 compromised versions
- Oct 15, 2024
Malicious code in maliciouspackage (PyPI)
5 compromised versions
- Oct 14, 2024
Malicious code in lwplugin (PyPI)
1 compromised version
- Oct 14, 2024
Malicious code in luna-paysure (PyPI)
5 compromised versions
- Oct 13, 2024
Malicious code in robloxrequestsss (PyPI)
1 compromised version
- Oct 13, 2024
Malicious code in discordmessager (PyPI)
3 compromised versions
- Oct 8, 2024
Malicious code in fake-usreagant (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in useregent-generator (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in user-random-agent-user (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in user-rand-agnt-user (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in user-gen-agent-random (PyPI)
3 compromised versions
- Oct 7, 2024
Malicious code in ua-agent-generator (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in sol-regex-gener (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in gen-user-random-agent (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in fake-usreagent (PyPI)
1 compromised version
- Oct 7, 2024
Malicious code in crypto-regex-gener (PyPI)
1 compromised version
Page 304 of 479