Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,628 total in pypi · sorted newest first- Dec 24, 2024
Malicious code in flasl (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in fkask (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in fflask (PyPI)
3 compromised versions
- Dec 24, 2024
Malicious code in falask (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in requesr (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in handyfiles (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in filecraft (PyPI)
1 compromised version
- Dec 19, 2024
Malicious code in piepunk (PyPI)
3 compromised versions
- Dec 17, 2024
Malicious code in utilitypyfunc (PyPI)
4 compromised versions
- Dec 17, 2024
Malicious code in discordbotstatus (PyPI)
1 compromised version
- Dec 17, 2024
Malicious code in discordbotpresence (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in presudo-generate (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in noway-back (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in langer-updater (PyPI)
6 compromised versions
- Dec 16, 2024
Malicious code in lan-clean (PyPI)
2 compromised versions
- Dec 16, 2024
Malicious code in code-tracker (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in code-suggester (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in code-beautifyer (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in clean-packager (PyPI)
1 compromised version
- Dec 16, 2024
Malicious code in zip-me (PyPI)
1 compromised version
- Dec 14, 2024
Malicious code in threadfluent (PyPI)
1 compromised version
- Dec 14, 2024
Malicious code in httpfluent (PyPI)
1 compromised version
- Dec 14, 2024
Malicious code in websynapse (PyPI)
1 compromised version
- Dec 14, 2024
Malicious code in rwoka (PyPI)
3 compromised versions
- Dec 12, 2024
Malicious code in python-bitget-wrapper (PyPI)
2 compromised versions
- Dec 12, 2024
Malicious code in python-bitget-request (PyPI)
2 compromised versions
- Dec 12, 2024
Malicious code in python-bitget-connect (PyPI)
1 compromised version
- Dec 12, 2024
Malicious code in python-bitget-api (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in urlcon (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in unzipxz (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in treadtools (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in testlibrary128982 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in testerpackage123 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test128123612 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test-hwp-uwpp (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test-hwp-uwp (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in taoreg (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in sysconx4 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in solana-account-sdk (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in shokobo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in rkpairip (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in rkjp (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in rk-pairip (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in requestsuuuj (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in requests99999999 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in requests-2-32-3 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in replication-delay-client111 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in py-colorprinting (PyPI)
5 compromised versions
- Dec 9, 2024
Malicious code in otci-openthread (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in notoken887 (PyPI)
79 compromised versions
Page 51 of 233