Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jun 25, 2024
Malicious code in pipcolourlibv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolouringv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolouringslibv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolouringskitsv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolouringskits (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolourextension (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolouraddonsv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolorv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolortoolkit (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolors (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolorpkgv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolorlibv3 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolorlibraryv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolorize (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcoloringsextv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcolorings (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcoloringliberyv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcoloringlibary (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcoloradds (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcoloraddonsv2 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcolor (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pip-remote-access-test (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pip-rce (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in pip-goodthing (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piolow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pinkhippodirty (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pingdomv3 (PyPI)
8 compromised versions
- Jun 25, 2024
Malicious code in pilpow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pillox (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pillov (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilloq (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilloo (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilloa (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pillo2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pillkw (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilliw (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilliow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pill9w (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pilkow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pik-utils (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pi-cord (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pepsi (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pepequests (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pehttps (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pathfound (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pathfinderpy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in passport-snapchat (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in parseweb (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in parser-scrapper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in paquete-1 (PyPI)
1 compromised version
Page 333 of 479