Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Mar 28, 2025
Malicious code in pandaspytest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in opera2d (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in omnigodz-random (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in multiopython (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in msgspec-python313-pre (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in license-txt (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in libmelee (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in lalpulsar (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ignore-ssl (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in gmpykit (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in flaskignoressl (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in fenics-dolfinx (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in execjs (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in eth-defi (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in django-storage (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in datasetsgraphviz (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in daft-dashboard (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in cryptographymethods (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in chbencode (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in cdms2 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in alibabacloud-gateway-fc-util-py2 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in akangatu (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in aiphttp (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in agents-kit (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in acapy-agent-didx (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in 7-0 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in 3-0 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in 0-8 (PyPI)
1 compromised version
- Mar 27, 2025
Malicious code in conn-utils (PyPI)
2 compromised versions
- Mar 25, 2025
Malicious code in quicolor (PyPI)
10 compromised versions
- Mar 25, 2025
Malicious code in quickcolors (PyPI)
1 compromised version
- Mar 25, 2025
Malicious code in coloryi (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in pyrovider (PyPI)
6 compromised versions
- Mar 24, 2025
Malicious code in team-bsb-bot (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bsb-backup (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in f2d5cfdc642c3d5 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in f2d5cfdc642c3d4 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI)
3 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)
2 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)
2 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff (PyPI)
4 compromised versions
- Mar 23, 2025
Malicious code in yolov8mini (PyPI)
10 compromised versions
- Mar 23, 2025
Malicious code in codeoptimizer (PyPI)
2 compromised versions
- Mar 21, 2025
Malicious code in prmduc193 (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in connector-bsb (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in bsb-family-pack (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in bsb-connector (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-v1 (PyPI)
1 compromised version
Page 46 of 233