Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- May 20, 2023
Malicious code in os-numpy (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pylint-py (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pylint-beautifulsoup (PyPI)
1 compromised version
- May 20, 2023
Malicious code in sqlalchemy-requests (PyPI)
1 compromised version
- May 20, 2023
Malicious code in matplotlib-req (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pygame-install (PyPI)
1 compromised version
- May 20, 2023
Malicious code in beautifulsoup-numpy (PyPI)
1 compromised version
- May 20, 2023
Malicious code in selenium-matplotlib (PyPI)
1 compromised version
- May 20, 2023
Malicious code in numpy-selenium (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pygame-pytorch (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pytorch-pandas (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pandas-numpy (PyPI)
1 compromised version
- May 20, 2023
Malicious code in matplotlib-sqlalchemy (PyPI)
1 compromised version
- May 20, 2023
Malicious code in crypto-pygame (PyPI)
1 compromised version
- May 20, 2023
Malicious code in print-pip (PyPI)
1 compromised version
- May 20, 2023
Malicious code in install-pyyaml (PyPI)
1 compromised version
- May 20, 2023
Malicious code in requests-pandas (PyPI)
1 compromised version
- May 20, 2023
Malicious code in scikit-learn-matplotlib (PyPI)
1 compromised version
- May 20, 2023
Malicious code in print-django (PyPI)
1 compromised version
- May 20, 2023
Malicious code in django-pyyaml (PyPI)
1 compromised version
- May 20, 2023
Malicious code in beautifulsoup-scikit-learn (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pygame-print (PyPI)
1 compromised version
- May 20, 2023
Malicious code in sys-scikit-learn (PyPI)
1 compromised version
- May 20, 2023
Malicious code in req-matplotlib (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pyyaml-selenium (PyPI)
1 compromised version
- May 20, 2023
Malicious code in matplotlib-requests (PyPI)
1 compromised version
- May 20, 2023
Malicious code in req-os (PyPI)
1 compromised version
- May 20, 2023
Malicious code in matplotlib-flask (PyPI)
1 compromised version
- May 20, 2023
Malicious code in sys-selenium (PyPI)
1 compromised version
- May 20, 2023
Malicious code in requests-flask (PyPI)
1 compromised version
- May 20, 2023
Malicious code in beautifulsoup-requests (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pytorch-pygame (PyPI)
1 compromised version
- May 20, 2023
Malicious code in sqlalchemy-install (PyPI)
1 compromised version
- May 20, 2023
Malicious code in install-crypto (PyPI)
1 compromised version
- May 20, 2023
Malicious code in pylint-sys (PyPI)
1 compromised version
- May 20, 2023
Malicious code in keras-arg (PyPI)
1 compromised version
- May 20, 2023
Malicious code in keras-beautifulsoup (PyPI)
1 compromised version
- May 20, 2023
Malicious code in install-pytest (PyPI)
1 compromised version
- May 19, 2023
Malicious code in pywolle (PyPI)
1 compromised version
- May 18, 2023
Malicious code in guiconsoles (PyPI)
1 compromised version
- May 17, 2023
Malicious code in pandasprox (PyPI)
8 compromised versions
- May 17, 2023
Malicious code in pywhool (PyPI)
1 compromised version
- May 15, 2023
Malicious code in security-util-py (PyPI)
2 compromised versions
- May 14, 2023
Malicious code in gkjzjh146 (PyPI)
1 compromised version
- May 13, 2023
Malicious code in pywool (PyPI)
2 compromised versions
- May 10, 2023
Malicious code in spammingsynonym (PyPI)
1 compromised version
- May 10, 2023
Malicious code in spammingsynonyms (PyPI)
1 compromised version
- May 10, 2023
Malicious code in httprequesting (PyPI)
1 compromised version
- May 10, 2023
Malicious code in smsobfuscate (PyPI)
1 compromised version
- May 10, 2023
Malicious code in spamsynonym (PyPI)
2 compromised versions
Page 351 of 479