Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Aug 23, 2024
Malicious code in swapoc (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in requestss3 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requestss2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requests1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pytc123 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hackmiami (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in soultracker (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-346234293 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-name-here (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg2 (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in evil-pkg (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in ninjainjtest1337 (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in wehaveatogether (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in test-tool-devdevrl-hackerone (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in shiva-rao23 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in python-project-wntliogu (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in popeye-shyam-love (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pitest117 (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in pitest115 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in lobomarinopython (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in ibmodules (PyPI)
3 compromised versions
- Aug 23, 2024
Malicious code in honestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hhonestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hello-bozzo2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hack-test (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in gltest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-time-zzs (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-root (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in expkg-am (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in example-pypi-package-loler1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in easyioctl (PyPI)
5 compromised versions
- Aug 23, 2024
Malicious code in dependency00011124931 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in chatgpt-aitools (PyPI)
4 compromised versions
- Aug 23, 2024
Malicious code in basic-arithmetics (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in azure-projects (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in malware-test-pack-new (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hellopythopyy (PyPI)
5 compromised versions
- Aug 23, 2024
Malicious code in hellopythopy (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in confluent-docker-utils (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in anaconda-anon-usage (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in redis-di-processor (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in oz-merkle-tree (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in formatter-test-package (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in unrartest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pyunzip (PyPI)
3 compromised versions
- Aug 22, 2024
Malicious code in bananaholder (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in byted-tbs (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in ttat-api-test (PyPI)
2 compromised versions
- Aug 22, 2024
Malicious code in ttat-api (PyPI)
1 compromised version
Page 62 of 233