Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in google-cloud-datacatalog-lineage-producer-client (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in flexssl (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in flashinfer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in evil-pkk (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in dependency-confusion-test-666 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in crunchie (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in companyx-metaflow (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in comfyui-node-test (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in comfyui-node-pkg (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in cittronn (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in chunqiuwestj-pkg-westj137 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in ceiec (PyPI)
4 compromised versions
- Jul 26, 2024
Malicious code in blz-test-package (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in blabb111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in appsec-utils (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adent-core-api (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in adafruit-display-text (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vsc-config (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in vsc-accountpage-clients (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in voto3 (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in tomli-dzw (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in test-test-asd-1 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in terraformness (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sumo-py-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in stackstorm-runner-action-chain (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sklearns (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in security-automation-job (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in search-python-common (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in s4transfer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-spark (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-pandas (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-notebooks (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-metrics (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-kafka (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in python-drgn-commons-all (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pysbark (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in puffionerlolpo2131 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in platform-harness-ecr-configmap (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pd-py-cli (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in pckaging (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in orion-algo-extrapol (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in oracle-tools (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in optimux (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in matplotlibp (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in matlibplot (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in layoutspecs (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in hawzebisdzazf (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in golden-gates (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in cmdb-worker-pckg (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in check-codeowners (PyPI)
1 compromised version
Page 67 of 233