Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in jd-mlops (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in is-number-object (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in interasdasdnal-data-parser (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in greensadway (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in graphemer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in google-appengine-ext (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in globrex (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in elbloadmonitor (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in cloudx-base (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in cloudx-auth (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in alksdjpureranser (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in 0x000testqwe (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in saml-helper (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in rapyd-logger (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in gwpythonsectt2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in gwpythonsectt1 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in c8tks94kspjyhtb (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in c8tks94kspjghtb (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in c8test (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in atlasctf-21-prod-22 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in packagemurder (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in cugraph-service-client (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in cugraph-dgl (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vfsrcetest (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vfsrce18 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rqeuets (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in merpe (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in merbe (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in mcp-xyz (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in kms-tls-sdk (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in discord-boteasy (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in deepseek-fake (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in ctftestsowwy (PyPI)
13 compromised versions
- Jul 26, 2024
Malicious code in chosenrce18 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in littelbitx0 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rtxt-dep4 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rtxt-dep3 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in c8tsdk (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in hello-wordl (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rtpoc1 (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in story-mcp-hub (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in requests-rapidl (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in requests-rapid (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pydiolag6688 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mytonctrl (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in multiutils (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in subdomainer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in quizdom (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in szn-search-mlops-serp-downloader (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-dateutil-malicious (PyPI)
1 compromised version
Page 65 of 233