Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Apr 23, 2025
Malicious code in sincpro-logger (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pyhack (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pycolarized (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pyapimove (PyPI)
2 compromised versions
- Apr 23, 2025
Malicious code in pnuske (PyPI)
14 compromised versions
- Apr 23, 2025
Malicious code in leveup (PyPI)
2 compromised versions
- Apr 23, 2025
Malicious code in evm-validator (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in blackspammerbd-vx1 (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in s3transfer-sl (PyPI)
6 compromised versions
- Apr 22, 2025
Malicious code in aiolitesql (PyPI)
1 compromised version
- Apr 22, 2025
Malicious code in aioasyncsqlite (PyPI)
1 compromised version
- Apr 20, 2025
Malicious code in reqinstall (PyPI)
2 compromised versions
- Apr 20, 2025
Malicious code in zsender (PyPI)
1 compromised version
- Apr 20, 2025
Malicious code in zscaner (PyPI)
2 compromised versions
- Apr 20, 2025
Malicious code in zmaker (PyPI)
2 compromised versions
- Apr 20, 2025
Malicious code in pyapiepo (PyPI)
2 compromised versions
- Apr 12, 2025
Malicious code in colorona (PyPI)
1 compromised version
- Apr 10, 2025
Malicious code in colorina (PyPI)
11 compromised versions
- Apr 5, 2025
Malicious code in hyper-request (PyPI)
1 compromised version
- Apr 4, 2025
Malicious code in ultrafasttelethon (PyPI)
4 compromised versions
- Apr 4, 2025
Malicious code in fastgram (PyPI)
1 compromised version
- Apr 4, 2025
Malicious code in fastertelethon (PyPI)
2 compromised versions
- Apr 3, 2025
Malicious code in colorinsa (PyPI)
1 compromised version
- Apr 2, 2025
Malicious code in flask-auth-system (PyPI)
2 compromised versions
- Apr 2, 2025
Malicious code in flask-auth-sys (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in sccket (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in runwifi (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in runningwifi (PyPI)
1 compromised version
- Mar 31, 2025
Malicious code in randomwifi (PyPI)
1 compromised version
- Mar 30, 2025
Malicious code in bitcoinlibdbfix (PyPI)
7 compromised versions
- Mar 30, 2025
Malicious code in bitcoinlib-dev (PyPI)
6 compromised versions
- Mar 28, 2025
Malicious code in textgradient (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in ytest-cov (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in utilmy (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in twilio-rest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in torahbiblecodes (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in tempeh (PyPI)
4 compromised versions
- Mar 28, 2025
Malicious code in sphinxcontrib-napolean (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in solscan (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in slide-tc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ska-low-cbf-fpga (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in shleeh (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in requests-wiki (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in random-00013 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyscf-fciqmc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyroforktgcrypto-pyrofork (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pydantic-kit (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pychaosvm (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in piauthorizer (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pgmysql (PyPI)
1 compromised version
Page 45 of 233