Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Sep 23, 2024
Malicious code in mennort (PyPI)
1 compromised version
- Sep 23, 2024
Malicious code in rcebymrx (PyPI)
1 compromised version
- Sep 21, 2024
Malicious code in easypydb (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in torhc (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in setuptolos (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in seabonr (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in kersa (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in botoceor (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in bo3to (PyPI)
1 compromised version
- Sep 20, 2024
Malicious code in asciidrawing (PyPI)
2 compromised versions
- Sep 19, 2024
Malicious code in pdf2doc (PyPI)
1 compromised version
- Sep 17, 2024
Malicious code in sendtowev (PyPI)
4 compromised versions
- Sep 17, 2024
Malicious code in package-lib8127 (PyPI)
1 compromised version
- Sep 16, 2024
Malicious code in discself (PyPI)
1 compromised version
- Sep 16, 2024
Malicious code in discord-api (PyPI)
1 compromised version
- Sep 9, 2024
Malicious code in request-wizard (PyPI)
1 compromised version
- Sep 9, 2024
Malicious code in hyperreq (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in colorbytes (PyPI)
2 compromised versions
- Sep 8, 2024
Malicious code in colourfulls (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin2022 (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin-grave (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin-codes-pro (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin-codes-net2 (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin-codes-net (PyPI)
1 compromised version
- Sep 8, 2024
Malicious code in coffin-codes-2022 (PyPI)
1 compromised version
- Sep 7, 2024
Malicious code in cobo-python (PyPI)
1 compromised version
- Sep 7, 2024
Malicious code in cobo-custdy (PyPI)
1 compromised version
- Sep 7, 2024
Malicious code in cobo-custdoy (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in dirutils (PyPI)
2 compromised versions
- Sep 6, 2024
Malicious code in browser-cookies3 (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in browser-cookies1 (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in gmacpyutil (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in glob-to-regexp (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in babel-preset-current-node-syntax (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in ateslassia (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in youreallydontwantthispackage2132 (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in proto-google-cloud-dlp-v2beta1 (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in grpc-google-bigtable-v2 (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in whalebone7-poc (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in flag-leak-r (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in test-packages2 (PyPI)
2 compromised versions
- Sep 6, 2024
Malicious code in test-packages1 (PyPI)
2 compromised versions
- Sep 6, 2024
Malicious code in pwnstar-lib (PyPI)
9 compromised versions
- Sep 6, 2024
Malicious code in http-query (PyPI)
3 compromised versions
- Sep 6, 2024
Malicious code in gwinpy (PyPI)
1 compromised version
- Sep 6, 2024
Malicious code in mlc-llm-nightly (PyPI)
6 compromised versions
- Sep 6, 2024
Malicious code in hello-world-package-test (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in dahood (PyPI)
3 compromised versions
- Sep 4, 2024
Malicious code in automsg (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in artindex (PyPI)
1 compromised version
Page 60 of 233