Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,628 total in pypi · sorted newest first- Mar 19, 2025
Malicious code in blackspammerbd-tooll (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tool (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-tg (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-remot1 (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-remot (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-one (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-bsb (PyPI)
1 compromised version
- Mar 19, 2025
Malicious code in blackspammerbd-bot (PyPI)
2 compromised versions
- Mar 19, 2025
Malicious code in blackspammerbd (PyPI)
2 compromised versions
- Mar 18, 2025
Malicious code in bsb-family-pack2 (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in blackspammerbd1 (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in bsb-family-bot (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in python-socket-test (PyPI)
5 compromised versions
- Mar 18, 2025
Malicious code in logax (PyPI)
27 compromised versions
- Mar 18, 2025
Malicious code in axonify (PyPI)
7 compromised versions
- Mar 17, 2025
Malicious code in xcepthttp (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in httpx-client (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in asynchttpx (PyPI)
1 compromised version
- Mar 12, 2025
Malicious code in tonetext (PyPI)
2 compromised versions
- Mar 10, 2025
Malicious code in ccxt-mexc-futures (PyPI)
5 compromised versions
- Mar 9, 2025
Malicious code in wiki-requests (PyPI)
3 compromised versions
- Mar 9, 2025
Malicious code in voipms-service (PyPI)
1 compromised version
- Mar 8, 2025
Malicious code in tlsclient3 (PyPI)
2 compromised versions
- Mar 8, 2025
Malicious code in heroku-tl (PyPI)
15 compromised versions
- Mar 5, 2025
Malicious code in colorizetext (PyPI)
5 compromised versions
- Mar 5, 2025
Malicious code in enquiry-exam (PyPI)
1 compromised version
- Mar 5, 2025
Malicious code in certifications (PyPI)
1 compromised version
- Mar 4, 2025
Malicious code in pythonhttp (PyPI)
2 compromised versions
- Mar 3, 2025
Malicious code in xuiniadb (PyPI)
10 compromised versions
- Mar 3, 2025
Malicious code in usvr-agent (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in useragents (PyPI)
2 compromised versions
- Mar 3, 2025
Malicious code in usar-agent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronyx (PyPI)
19 compromised versions
- Mar 3, 2025
Malicious code in tronx (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronwebpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpyweb (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpynet (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronnetpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronlinkpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in trongridpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in ransomware (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in randomuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in maliciouspkg (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in fakeuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in envvenuma (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in aurm-python-sdk (PyPI)
16 compromised versions
- Mar 3, 2025
Malicious code in aurm-desktop-client (PyPI)
4 compromised versions
- Mar 2, 2025
Malicious code in mirage-rce (PyPI)
1 compromised version
- Mar 2, 2025
Malicious code in marinff-test (PyPI)
8 compromised versions
- Mar 2, 2025
Malicious code in ctf-aio-tool (PyPI)
1 compromised version
Page 47 of 233