Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Jul 31, 2025
Malicious code in libfwupdplugin1 (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in leip (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in kwargs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in karma-jasmine-sinon (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in jmdrs (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in hyperon-das-atomdb (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in graphlibx (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in graphex (PyPI)
4 compromised versions
- Jul 31, 2025
Malicious code in graphalgo (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in gcdt-bundler (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in flexiconf (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in filesystem-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in file-writer-control (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-triggers-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-redisdb-exchange-plugin (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-devices-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in exorigsim (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ensmallen-graph (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in duc193 (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ds-lime (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in dfshoesadsm (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in deeprce (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in crawl-requests (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in cppython-core (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in common-test (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in chalk-harness (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in celery-flower (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in catchmeoutsidehawbade (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in carpentry-ci (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bunzbar (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in broccoli-server (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in boto3-batch-utils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bmlx-openapi-client (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bluesadway (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in blackspammerbd-termux (PyPI)
2 compromised versions
- Jul 31, 2025
Malicious code in bitranox-coloredlogs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bioformats (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bavard-ml-common (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisherman (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisher (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aistac-foundation (PyPI)
1 compromised version
- Jul 31, 2025
After a successful phishing attack, new versions of `num2words` were published containing malware.
2 compromised versions
- Jul 31, 2025
Malicious code in prof-tg-to-qu (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in prof-tg-go-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-gjho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-gdghho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-dggrto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in backtradingbot (PyPI)
5 compromised versions
- Jul 30, 2025
Malicious code in trongridperm (PyPI)
1 compromised version
- Jul 30, 2025
Malicious code in flatfox-api (PyPI)
6 compromised versions
Page 38 of 233