Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,627 total in pypi · sorted newest first- Oct 16, 2024
Malicious code in test-package-sample (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in spl-token (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in solana-transfer (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in solana-transaction (PyPI)
8 compromised versions
- Oct 16, 2024
Malicious code in solana-token (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in sol-token (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in rock51 (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in reverse-shell (PyPI)
13 compromised versions
- Oct 16, 2024
Malicious code in reportgenpub (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in rectutils (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in raimbowxyz (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pyzelf (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pytypier (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pytoileur (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in python-consul2-hh (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pyspliter (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pysoltransfer (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in pysoltoken (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in pysigner (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pypackscraper (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in pycolorlib (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pycoloramade (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in py-solana-cli (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in ptmpl (PyPI)
13 compromised versions
- Oct 16, 2024
Malicious code in protoc (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in phantomdecoderss (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in phantomdecoders (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in pdsuax4 (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in pdsuax (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in ml-linear-regression-lib (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in marshall (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in javier-vidal (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in h99ai (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in exodusdecoderss (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in exodusdecoders (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in eth-account-api (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in crytic-compilers (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in cryptoaitools (PyPI)
7 compromised versions
- Oct 16, 2024
Malicious code in class-py (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in cipherbcryptors (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in cipherbcryptor (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in calendar-extender (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in bughunter9 (PyPI)
20 compromised versions
- Oct 16, 2024
Malicious code in blypack (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoderss (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoders (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in artifact-lab-3-package-e90915e1 (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in aiogt (PyPI)
4 compromised versions
- Oct 15, 2024
Malicious code in maliciouspackage (PyPI)
5 compromised versions
- Oct 14, 2024
Malicious code in lwplugin (PyPI)
1 compromised version
Page 58 of 233