Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,628 total in pypi · sorted newest first- Feb 3, 2025
Malicious code in bytedance-chat (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in bugscanx (PyPI)
12 compromised versions
- Feb 3, 2025
Malicious code in breqest (PyPI)
1 compromised version
- Feb 3, 2025
Malicious code in alrsnlaseast (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in account-eth (PyPI)
2 compromised versions
- Feb 2, 2025
Malicious code in novatwo (PyPI)
1 compromised version
- Feb 1, 2025
Malicious code in web3imports (PyPI)
1 compromised version
- Feb 1, 2025
Malicious code in asynchelpers (PyPI)
1 compromised version
- Jan 26, 2025
Malicious code in markitanalysis (PyPI)
2 compromised versions
- Jan 26, 2025
Malicious code in getpublicip (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in rqsts (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesttss (PyPI)
2 compromised versions
- Jan 25, 2025
Malicious code in requestsa (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesra (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in reques (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in reque (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in superline (PyPI)
1 compromised version
- Jan 21, 2025
Malicious code in mlc-llm-nightly-cu123 (PyPI)
1 compromised version
- Jan 21, 2025
Malicious code in mlc-ai-nightly-rocm62 (PyPI)
1 compromised version
- Jan 21, 2025
Malicious code in mlc-ai-nightly-cu123 (PyPI)
1 compromised version
- Jan 21, 2025
Malicious code in mlc-ai-nightly (PyPI)
3 compromised versions
- Jan 14, 2025
Malicious code in awsglueml (PyPI)
1 compromised version
- Jan 14, 2025
Malicious code in awsgluedq (PyPI)
3 compromised versions
- Jan 14, 2025
Malicious code in aws-glue (PyPI)
2 compromised versions
- Jan 14, 2025
Malicious code in amzn-awsglue (PyPI)
2 compromised versions
- Jan 14, 2025
Malicious code in amzn-aws-glue-ml-libs-python (PyPI)
2 compromised versions
- Jan 10, 2025
Malicious code in utf-cleaner (PyPI)
6 compromised versions
- Jan 10, 2025
Malicious code in javascan (PyPI)
5 compromised versions
- Jan 10, 2025
Malicious code in just-test-framework (PyPI)
2 compromised versions
- Jan 10, 2025
Malicious code in just-framework (PyPI)
1 compromised version
- Jan 10, 2025
Malicious code in djangoframework-test (PyPI)
1 compromised version
- Jan 7, 2025
Malicious code in wdwq (PyPI)
1 compromised version
- Jan 2, 2025
Malicious code in ilovenyxxbait (PyPI)
1 compromised version
- Jan 2, 2025
Malicious code in ilovenyxx (PyPI)
1 compromised version
- Dec 31, 2024
Malicious code in requetses (PyPI)
2 compromised versions
- Dec 29, 2024
Malicious code in hugginglega (PyPI)
5 compromised versions
- Dec 29, 2024
Malicious code in dscss (PyPI)
2 compromised versions
- Dec 28, 2024
Malicious code in selenium-plugin (PyPI)
1 compromised version
- Dec 26, 2024
Malicious code in sysfunc (PyPI)
8 compromised versions
- Dec 26, 2024
Malicious code in syscontrol (PyPI)
2 compromised versions
- Dec 26, 2024
Malicious code in subsys-client (PyPI)
2 compromised versions
- Dec 26, 2024
Malicious code in oscontrol (PyPI)
8 compromised versions
- Dec 26, 2024
Malicious code in opshub (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in rreqest (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in reqzest (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in requeszs (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in reqiest (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in reqeuts (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in reqest (PyPI)
3 compromised versions
- Dec 24, 2024
Malicious code in reqesst (PyPI)
1 compromised version
Page 50 of 233