Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Aug 28, 2025
Malicious code in kraken-virus (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in krakenvirus (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in iamenumerat (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in zlib1g-dev (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in zking (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in youtube-new (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xorg-renderproto (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xoloyuaezcqixu (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xoloowlowpzeke (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xolonavrylpbeb (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xolofyxkotqwko (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in xoloazfgyobkaw (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in web5 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in virtualebv (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in uploder-rubika (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in upgrade-requests (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in toolbelt-requests (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in tkinnter2 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in tkinnter (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in this-is-vvvv (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in tf-nightly-2-0-preview (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in testcase100 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in test-tetdssa (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in telemaster (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in telegrampremiumfix (PyPI)
5 compromised versions
- Aug 28, 2025
Malicious code in steembase (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in spykes (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in spoof-user-agent (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in speedyrequests (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in some-other-package (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in solution-maker (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in smartsheet (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in scraperworldapi (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in sample-module (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rubyreq (PyPI)
4 compromised versions
- Aug 28, 2025
Malicious code in rtxt-dep1 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rsacracker (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rqrqrq (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rq-websites (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ros2-demo-py (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rickquests (PyPI)
3 compromised versions
- Aug 28, 2025
Malicious code in reversepkg (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in requests-util (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in requests-beta (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in requests-2022 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in request-util (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in requesgs (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in requeqts (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in reqeuest-new (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in reqeuest-2022 (PyPI)
1 compromised version
Page 32 of 233