Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Aug 23, 2024
Malicious code in ninjainjtest1337 (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in wehaveatogether (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in test-tool-devdevrl-hackerone (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in shiva-rao23 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in python-project-wntliogu (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in popeye-shyam-love (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pitest117 (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in pitest115 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in lobomarinopython (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in ibmodules (PyPI)
3 compromised versions
- Aug 23, 2024
Malicious code in honestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hhonestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hello-bozzo2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hack-test (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in gltest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-time-zzs (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-root (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in expkg-am (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in example-pypi-package-loler1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in easyioctl (PyPI)
5 compromised versions
- Aug 23, 2024
Malicious code in dependency00011124931 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in chatgpt-aitools (PyPI)
4 compromised versions
- Aug 23, 2024
Malicious code in basic-arithmetics (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in azure-projects (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in malware-test-pack-new (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hellopythopyy (PyPI)
5 compromised versions
- Aug 23, 2024
Malicious code in hellopythopy (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in confluent-docker-utils (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in anaconda-anon-usage (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in redis-di-processor (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in oz-merkle-tree (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in formatter-test-package (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in unrartest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pyunzip (PyPI)
3 compromised versions
- Aug 22, 2024
Malicious code in bananaholder (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in byted-tbs (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in ttat-api-test (PyPI)
2 compromised versions
- Aug 22, 2024
Malicious code in ttat-api (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in tiktok-session-lite-sdk (PyPI)
5 compromised versions
- Aug 22, 2024
Malicious code in subsys-counter (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in kmvn-ekjvnbwkhjbewv (PyPI)
2 compromised versions
- Aug 22, 2024
Malicious code in byterec-models (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in byted-rtc-robot-api-v2 (PyPI)
5 compromised versions
- Aug 22, 2024
Malicious code in audit-themis-i18n (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in threading-assistant (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in thethreadingassistant (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in assisting-threading (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in assistant-threader (PyPI)
1 compromised version
- Aug 14, 2024
Malicious code in aiotrans (PyPI)
6 compromised versions
- Aug 14, 2024
Malicious code in uconst (PyPI)
4 compromised versions
Page 308 of 479