Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Sep 4, 2024
Malicious code in pydeobf (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pycordapi (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pycblines (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyaacv (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in partpyth (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in nezur (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in mumuplayer12 (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in mumupatcher (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in lowui (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in larpexodus (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in hahahasillyxd (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in haaahhaha (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in embeds (PyPI)
3 compromised versions
- Sep 4, 2024
Malicious code in discould (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in cryptocalls (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in cblines (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in uidesign (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in rolib (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in roinject (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in rodll (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pytrv (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyloy (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyadd (PyPI)
5 compromised versions
- Sep 4, 2024
Malicious code in modeflow (PyPI)
3 compromised versions
- Sep 4, 2024
Malicious code in ezauto (PyPI)
1 compromised version
- Sep 2, 2024
Malicious code in pojang-resorter (PyPI)
56 compromised versions
- Aug 30, 2024
Malicious code in calculator-c08d6d50f5964131 (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in crustyhttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in httpsmovements (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in asyncmodules (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in assulthimars (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in assaulthimars (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in utilhttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in modernreqs (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in flophttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in invokehttp (PyPI)
2 compromised versions
- Aug 27, 2024
Malicious code in c2 (PyPI)
8 compromised versions
- Aug 27, 2024
Malicious code in bitcommit (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in swapoc (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in requestss3 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requestss2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requests1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pytc123 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hackmiami (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in soultracker (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-346234293 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-name-here (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg2 (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in evil-pkg (PyPI)
1 compromised version
Page 307 of 479