Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,628 total in pypi · sorted newest first- Nov 30, 2024
Malicious code in calctestchristmas (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calcnotepad (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calccc (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in calc123lorc (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bettercolorstesting (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever3 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever2 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in bestcolorsever (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in nirohf-reverse-shell (PyPI)
2 compromised versions
- Nov 29, 2024
Malicious code in driftme (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in catme (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in trove4j (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in shoots-flutter (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in shoots-api-test (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in pytest-tt-ddriven (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in kotlin-stdlib-jdk8 (PyPI)
1 compromised version
- Nov 29, 2024
Malicious code in byted-df (PyPI)
1 compromised version
- Nov 27, 2024
Malicious code in dgsinstaller (PyPI)
2 compromised versions
- Nov 27, 2024
Malicious code in ccsinstaller (PyPI)
3 compromised versions
- Nov 27, 2024
Malicious code in dftester-pip (PyPI)
1 compromised version
- Nov 24, 2024
Malicious code in cometlogger (PyPI)
1 compromised version
- Nov 22, 2024
Malicious code in newpipv3 (PyPI)
1 compromised version
- Nov 22, 2024
Malicious code in blackamerxs (PyPI)
1 compromised version
- Nov 17, 2024
Malicious code in random-security-test-pkg (PyPI)
2 compromised versions
- Nov 17, 2024
Malicious code in instacart-roulette-daemon-client (PyPI)
2 compromised versions
- Nov 16, 2024
Malicious code in zebo (PyPI)
1 compromised version
- Nov 16, 2024
Malicious code in pycalculater (PyPI)
1 compromised version
- Nov 16, 2024
Malicious code in discconnect (PyPI)
4 compromised versions
- Nov 14, 2024
Malicious code in reverse434343 (PyPI)
1 compromised version
- Nov 14, 2024
Malicious code in reverse4343 (PyPI)
1 compromised version
- Nov 14, 2024
Malicious code in eosio-signer (PyPI)
9 compromised versions
- Nov 13, 2024
Malicious code in ansishade (PyPI)
1 compromised version
- Nov 13, 2024
Malicious code in tingetone (PyPI)
2 compromised versions
- Nov 12, 2024
Malicious code in backwwii (PyPI)
1 compromised version
- Nov 12, 2024
Malicious code in backwwi (PyPI)
1 compromised version
- Nov 11, 2024
Malicious code in fabrice (PyPI)
- Nov 10, 2024
Malicious code in asn1tool (PyPI)
2 compromised versions
- Nov 7, 2024
Malicious code in huggingleg (PyPI)
4 compromised versions
- Nov 6, 2024
Malicious code in zero123 (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in uuss (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in uus (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in torchvisions (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in torchs-visions (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in textmesh (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in sjc (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in sampling-util (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in res-adapter (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in prolificdreamer (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in piano-transcription (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in next-vit (PyPI)
1 compromised version
Page 53 of 233