Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,628 total in pypi · sorted newest first- Dec 9, 2024
Malicious code in newpipv1 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in nasrpy (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in lib-defender (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in infoind (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in frexco-pip-requests (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ffefesaewad (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in fake-usragent (PyPI)
12 compromised versions
- Dec 9, 2024
Malicious code in fabrlce (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in fabricee (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in exodushcate (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in eosio-signerz (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in devilpy (PyPI)
7 compromised versions
- Dec 9, 2024
Malicious code in cutepy32 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in colourema (PyPI)
5 compromised versions
- Dec 9, 2024
Malicious code in colority (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in cipherbcrypto (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in ccl-localstoragerss (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in ccl-localstoragers (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbases (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbase (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in bugbounty (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in artifact-lab-3-package-0c8bce1c (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in arielbogo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in akobo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in aiocpa (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afritonpy (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in afriton-py (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afriton (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afrit-name (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in 48484efej8id (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in intgraphx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in graphicsx (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in flamepro (PyPI)
1 compromised version
- Dec 5, 2024
Malicious code in dbsxrchpro (PyPI)
1 compromised version
- Dec 4, 2024
Malicious code in huggingleg2 (PyPI)
1 compromised version
- Dec 3, 2024
Malicious code in genz-translator (PyPI)
20 compromised versions
- Dec 1, 2024
Malicious code in my-service-manager (PyPI)
8 compromised versions
- Dec 1, 2024
Malicious code in my-main-manager (PyPI)
4 compromised versions
- Dec 1, 2024
Malicious code in foop (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in datagov-harvester (PyPI)
2 compromised versions
- Dec 1, 2024
Malicious code in crowdstrike-foundry (PyPI)
3 compromised versions
- Dec 1, 2024
Malicious code in bancor-simulation (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in auth0-open-source-template (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in apache-airflow-providers-edge (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in omigo-data-analytics (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in pycryptographylibv3 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in pipcolorpkgv2 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in newpackagetest2025 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in newpackagetest2024 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in christmasmiraclemaker (PyPI)
1 compromised version
Page 52 of 233