Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,626 total in pypi · sorted newest first- Jul 26, 2024
Malicious code in chain00x (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in arnold-toolbox (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in appsec-script-py (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in akh-py (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in aiopbotocore (PyPI)
7 compromised versions
- Jul 26, 2024
Malicious code in some-random-package-33 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in nvidia-clara-sim (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in debug-toolbar (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in 123bla (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in blab111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in this-is-poc-fortesting-dontinstall-12345 (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in manojmacpy (PyPI)
8 compromised versions
- Jul 26, 2024
Malicious code in graphcore-cloud-tools (PyPI)
1 compromised version
- Jul 24, 2024
Malicious code in evil-package (PyPI)
3 compromised versions
- Jul 24, 2024
Malicious code in pybanners (PyPI)
4 compromised versions
- Jul 22, 2024
Malicious code in popeye-xyz (PyPI)
1 compromised version
- Jul 22, 2024
Malicious code in popeye-pip-v3 (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in hexteamibm (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in asptcer (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in gentorqkkh1 (PyPI)
2 compromised versions
- Jul 21, 2024
Malicious code in gentorqkkh (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in testjsonn2 (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in testjson3 (PyPI)
1 compromised version
- Jul 21, 2024
Malicious code in testjsonn1 (PyPI)
6 compromised versions
- Jul 11, 2024
Malicious code in fasdghjkhjafsd (PyPI)
3 compromised versions
- Jul 9, 2024
Malicious code in openai-py3 (PyPI)
1 compromised version
- Jul 9, 2024
Malicious code in hugchats (PyPI)
1 compromised version
- Jul 9, 2024
Malicious code in deepseek-api (PyPI)
2 compromised versions
- Jul 9, 2024
Malicious code in pystlete (PyPI)
1 compromised version
- Jul 7, 2024
Malicious code in transformars (PyPI)
4 compromised versions
- Jul 6, 2024
Malicious code in better-gradient (PyPI)
3 compromised versions
- Jul 6, 2024
Malicious code in whoisbuild (PyPI)
2 compromised versions
- Jul 6, 2024
Malicious code in discord-embedbuilder (PyPI)
4 compromised versions
- Jul 5, 2024
Malicious code in incaperror (PyPI)
1 compromised version
- Jul 3, 2024
Malicious code in spl-types (PyPI)
4 compromised versions
- Jul 3, 2024
Malicious code in sol-instruct (PyPI)
1 compromised version
- Jul 3, 2024
Malicious code in raydium-sdk (PyPI)
2 compromised versions
- Jul 3, 2024
Malicious code in raydium (PyPI)
4 compromised versions
- Jul 3, 2024
Malicious code in sol-structs (PyPI)
2 compromised versions
- Jul 3, 2024
Malicious code in python-guild (PyPI)
1 compromised version
- Jul 1, 2024
Malicious code in text-adventure-game (PyPI)
4 compromised versions
- Jun 29, 2024
Malicious code in zlibxjson (PyPI)
2 compromised versions
- Jun 28, 2024
Malicious code in etheriuum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheriun (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheriumm (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherium (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheriuim (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherim (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheriem (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in ethereuum (PyPI)
1 compromised version
Page 68 of 233