Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jun 25, 2024
Malicious code in tls-client-py (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tls-bypass (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tlibrium (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tkintrs (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tjajsd (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in timeextral-advanced-8d2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in timeextral-advanced (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktokthon (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktok9 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktok8 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktok6 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktok5 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tiktok4 (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in tikinters (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in threadscount (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in threads4images (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in threadlimite (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in this-is-fine-wuzzi (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in thesar (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in thebypasstool (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tgrequests (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tgrequest (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tglibrium (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in tfit (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in testwhitesnakemodule (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testwhitesnake123a (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testwhitesnake (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpipxyz4 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpipxyz3 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpipxyz2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpipxyz (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpackages159 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in testpackage2lol (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testpackage1mcpe (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testnetdubled (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testlibtaha (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testlibs111 (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in testiramtikurbu (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testingvvv3xx (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testingiavv (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testingiasdf1 (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in testing1232 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testfiwldsd21233s (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testepassword-generate (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testedwin (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in testdufou (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in testdontdownloadthis (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in test-typo-pypi (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in test-package-main-dist (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in test-module-cst (PyPI)
1 compromised version
Page 320 of 479