Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Aug 28, 2025
Malicious code in reqests-2022 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in reqest-2022 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in regexparam (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rbx-cookie (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rbx-autohit (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in rblxsetup (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in pyxhttp (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in pythonsftpservermanuel (PyPI)
10 compromised versions
- Aug 28, 2025
Malicious code in pythonroblox (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in python-kudu (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in python-eicar (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in python-dependency-confusion-attacks (PyPI)
3 compromised versions
- Aug 28, 2025
Malicious code in pyswyfter (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in pyscapes (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in py4self (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in prometheus-api-metrics (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in pkproxy (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in peloton-clients (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in peloton-client123 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in peew (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in numbervalidator (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in nofexhack (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in nofex-hack (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in nexlang (PyPI)
4 compromised versions
- Aug 28, 2025
Malicious code in newdontinstallthistest (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-sql (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-requests-module (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in new-requests-2021 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ncurses (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in namedpkg (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in mozilla (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in more-colors (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in malicious-pip-package-for-demo (PyPI)
3 compromised versions
- Aug 28, 2025
Malicious code in lyft-avidl (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in loy (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in logging-python (PyPI)
2 compromised versions
- Aug 28, 2025
Malicious code in lightfm-ext (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in kfaction (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in jinja22 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ironic-secureboot-driver (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in iou3d (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in ilovemadpussy9 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in http-interact (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hironobunigo (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hera-mapmaking-visibilitysimulation (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in hellowpkg (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in gearbest-parser (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in gauravtest123 (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in fquant (PyPI)
1 compromised version
- Aug 28, 2025
Malicious code in flyadmin (PyPI)
1 compromised version
Page 33 of 233