Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Aug 20, 2025
Malicious code in noonutil (PyPI)
6 compromised versions
- Aug 20, 2025
Malicious code in k7eel (PyPI)
4 compromised versions
- Aug 19, 2025
Malicious code in tronlinknet (PyPI)
1 compromised version
- Aug 19, 2025
Malicious code in tronwalletpy (PyPI)
1 compromised version
- Aug 19, 2025
Malicious code in caas-jupyter-tools (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in binance-sdk-ebate (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in flatfox-api-python (PyPI)
3 compromised versions
- Aug 18, 2025
Malicious code in svcmanagement (PyPI)
1 compromised version
- Aug 18, 2025
Malicious code in swiv (PyPI)
4 compromised versions
- Aug 17, 2025
Malicious code in flask-tdg-cyberx (PyPI)
5 compromised versions
- Aug 17, 2025
Malicious code in pytensorlite (PyPI)
5 compromised versions
- Aug 15, 2025
Malicious code in titifel-pyip (PyPI)
3 compromised versions
- Aug 15, 2025
Malicious code in libgomp (PyPI)
6 compromised versions
- Aug 14, 2025
Malicious code in iamenumerate (PyPI)
2 compromised versions
- Aug 14, 2025
Malicious code in jsonist (PyPI)
1 compromised version
- Aug 14, 2025
Malicious code in titifel-pypi (PyPI)
6 compromised versions
- Aug 14, 2025
Malicious code in browser-run (PyPI)
3 compromised versions
- Aug 13, 2025
Malicious code in st-py-de-cli (PyPI)
1 compromised version
- Aug 13, 2025
Malicious code in pycrackhash (PyPI)
2 compromised versions
- Aug 12, 2025
Malicious code in iamenumer (PyPI)
1 compromised version
- Aug 12, 2025
Malicious code in aws-enumerate (PyPI)
1 compromised version
- Aug 12, 2025
Malicious code in kertash (PyPI)
2 compromised versions
- Aug 11, 2025
Malicious code in flask-tdg-cyber (PyPI)
11 compromised versions
- Aug 10, 2025
Malicious code in tronapihelper (PyPI)
1 compromised version
- Aug 9, 2025
Malicious code in permsupping (PyPI)
1 compromised version
- Aug 8, 2025
Malicious code in w3shi-h1 (PyPI)
3 compromised versions
- Aug 8, 2025
Malicious code in packed-w3shi (PyPI)
1 compromised version
- Aug 7, 2025
Malicious code in raknet-testing-package2 (PyPI)
3 compromised versions
- Aug 7, 2025
Malicious code in raknet-testing-package (PyPI)
6 compromised versions
- Aug 6, 2025
Malicious code in tronapisync (PyPI)
4 compromised versions
- Aug 6, 2025
Malicious code in httpsyncer (PyPI)
1 compromised version
- Aug 5, 2025
Malicious code in flashsimplelogger (PyPI)
2 compromised versions
- Aug 5, 2025
Malicious code in trongridapi (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in discordsync (PyPI)
2 compromised versions
- Aug 4, 2025
Malicious code in bh-25-req-ase (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestz (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in zhopaorlaaato (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in sisaws (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in thisisthedaventest (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in totallysafe (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsodelib (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in dziplib (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsidelib (PyPI)
15 compromised versions
- Aug 3, 2025
Malicious code in secmeasure (PyPI)
3 compromised versions
- Aug 2, 2025
Malicious code in supersafepackage (PyPI)
10 compromised versions
- Aug 2, 2025
Malicious code in bh-usa-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in bh-usa-automate-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in tsesyx (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in web3dummycti (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-ase-automate (PyPI)
1 compromised version
Page 36 of 233