Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in blz-test-package (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in blabb111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in appsec-utils (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adent-core-api (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adafruit-display-text (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vsc-config (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vsc-accountpage-clients (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in voto3 (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in tomli-dzw (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in test-test-asd-1 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in terraformness (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sumo-py-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in stackstorm-runner-action-chain (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sklearns (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in security-automation-job (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in search-python-common (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in s4transfer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-spark (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-pandas (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-notebooks (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-metrics (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-kafka (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-all (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pysbark (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in puffionerlolpo2131 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in platform-harness-ecr-configmap (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pd-py-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pckaging (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in orion-algo-extrapol (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in oracle-tools (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in optimux (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in matplotlibp (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in matlibplot (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in layoutspecs (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in hawzebisdzazf (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in golden-gates (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in cmdb-worker-pckg (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in check-codeowners (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in chain00x (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in arnold-toolbox (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in appsec-script-py (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in akh-py (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in aiopbotocore (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in some-random-package-33 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in nvidia-clara-sim (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in debug-toolbar (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in 123bla (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in blab111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in this-is-poc-fortesting-dontinstall-12345 (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in manojmacpy (PyPI)
8 compromised versions
Page 313 of 479