Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Aug 10, 2024
Malicious code in jupihelp (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in juphelper (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in juphelp (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in jupiterhelper (PyPI)
4 compromised versions
- Aug 10, 2024
Malicious code in jupiter-helper (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in aiohttp-libscss (PyPI)
6 compromised versions
- Aug 9, 2024
Malicious code in ethercheck (PyPI)
2 compromised versions
- Aug 7, 2024
Malicious code in pyfetcher-vaaai (PyPI)
1 compromised version
- Aug 7, 2024
Malicious code in pyfetcher (PyPI)
4 compromised versions
- Aug 7, 2024
Malicious code in netfetcher (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in gandon-pidar1 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in whel (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in whee11 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in s3ffs (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in fsspecc (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in crypt0graphyy (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in paquete-5 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in advdef01 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit3 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit2 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit1 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in reqests-2 (PyPI)
1 compromised version
- Jul 29, 2024
Malicious code in strongkong (PyPI)
1 compromised version
- Jul 29, 2024
Malicious code in kongstrong (PyPI)
1 compromised version
- Jul 29, 2024
Malicious code in solgpt (PyPI)
3 compromised versions
- Jul 28, 2024
Malicious code in soali (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in soal (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in ebell (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in ebe (PyPI)
1 compromised version
- Jul 28, 2024
Malicious code in a-oder (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in qassabi (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-4 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-1 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mkdsli (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in masirkhan (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in jamasp (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in goftvagoo (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dexat2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dependency908 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dependency133434fr43437 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in confirmedbywaseem (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in your-module-name (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in testpysecure (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in shiva123456 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sensadway (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in rwimodeling (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in piprce (PyPI)
43 compromised versions
- Jul 26, 2024
Malicious code in murkh1111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in libspatialindex (PyPI)
2 compromised versions
Page 64 of 233