Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in otc-metadata (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in opengrep (PyPI)
8 compromised versions
- Jul 26, 2024
Malicious code in nifty-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in canvas-crawler (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in wasig4321 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in waseem4321 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in w7-poc (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in testospkg (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in googleapis-googleapis-grpc-python (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in example-vizsla-tutorial (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in deepseekai (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in deepseeek (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in d5e54ncy1337 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in d5e54nc32y1337 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in akatest (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in testresearchpackagedc (PyPI)
6 compromised versions
- Jul 26, 2024
Malicious code in pyqubee (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in wr-test (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in wasi8787878 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in w722-poc (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in appetize-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adafruit-imageload (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in puffioner131 (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in yt-yson-bindings (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in wave-opensdk (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-zbozi-ab-testing-fulltext (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-url (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in szn-search-mlops-common (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in szn-sasanka (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in szn-rain-client (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in stationschedule (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in springboot (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in shinchina (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in rtxt-dep2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in route-search (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in requests-rapidly (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pydevd-inject (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in postgresql-connector-python (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pinloggertest (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in oe-extract-idss (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in oe-extract-ids (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in oaieval (PyPI)
6 compromised versions
- Jul 26, 2024
Malicious code in netsec-monitor (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in myhexsender (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in muxf (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mkdocs-with-pdfs (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in manoj3121pip (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mac12manoj (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in lacucaracha (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in hello-world-installer-test (PyPI)
3 compromised versions
Page 66 of 233