Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in d5e54ncy1337 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in d5e54nc32y1337 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in akatest (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in testresearchpackagedc (PyPI)
6 compromised versions
- Jul 26, 2024
Malicious code in pyqubee (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in wr-test (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in wasi8787878 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in w722-poc (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in appetize-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adafruit-imageload (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in puffioner131 (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in yt-yson-bindings (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in wave-opensdk (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-zbozi-ab-testing-fulltext (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-url (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in szn-search-mlops-common (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in szn-sasanka (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-rain-client (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in stationschedule (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in springboot (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in shinchina (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rtxt-dep2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in route-search (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in requests-rapidly (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pydevd-inject (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in postgresql-connector-python (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pinloggertest (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in oe-extract-idss (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in oe-extract-ids (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in oaieval (PyPI)
6 compromised versions
- Jul 26, 2024
Malicious code in netsec-monitor (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in myhexsender (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in muxf (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mkdocs-with-pdfs (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in manoj3121pip (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mac12manoj (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in lacucaracha (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in hello-world-installer-test (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in google-cloud-datacatalog-lineage-producer-client (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in flexssl (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in flashinfer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in evil-pkk (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in dependency-confusion-test-666 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in crunchie (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in companyx-metaflow (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in comfyui-node-test (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in comfyui-node-pkg (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in cittronn (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in chunqiuwestj-pkg-westj137 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in ceiec (PyPI)
4 compromised versions
Page 312 of 479