Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Sep 4, 2024
Malicious code in antibyfron (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pymatcha (PyPI)
2 compromised versions
- Sep 4, 2024
Malicious code in xsilyxd (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in websend (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in solaraund (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyvantq (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pytskcheck (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pytkit (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pysolara (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pysleek (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pykane (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pydllcfg (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pydeobf (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pycordapi (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pycblines (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyaacv (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in partpyth (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in nezur (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in mumuplayer12 (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in mumupatcher (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in lowui (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in larpexodus (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in hahahasillyxd (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in haaahhaha (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in embeds (PyPI)
3 compromised versions
- Sep 4, 2024
Malicious code in discould (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in cryptocalls (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in cblines (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in uidesign (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in rolib (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in roinject (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in rodll (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pytrv (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyloy (PyPI)
1 compromised version
- Sep 4, 2024
Malicious code in pyadd (PyPI)
5 compromised versions
- Sep 4, 2024
Malicious code in modeflow (PyPI)
3 compromised versions
- Sep 4, 2024
Malicious code in ezauto (PyPI)
1 compromised version
- Sep 2, 2024
Malicious code in pojang-resorter (PyPI)
56 compromised versions
- Aug 30, 2024
Malicious code in calculator-c08d6d50f5964131 (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in crustyhttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in httpsmovements (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in asyncmodules (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in assulthimars (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in assaulthimars (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in utilhttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in modernreqs (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in flophttp (PyPI)
1 compromised version
- Aug 29, 2024
Malicious code in invokehttp (PyPI)
2 compromised versions
- Aug 27, 2024
Malicious code in c2 (PyPI)
8 compromised versions
- Aug 27, 2024
Malicious code in bitcommit (PyPI)
1 compromised version
Page 61 of 233