Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,623 total in pypi · sorted newest first- Jun 25, 2024
Malicious code in promptcolor (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in promogen (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in projectxlib (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in postgresserializer (PyPI)
8 compromised versions
- Jun 25, 2024
Malicious code in popyquests (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pollow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pohttp (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pocpackage1234 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in plutotestingagainn (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in plutotestingagain (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in plutotesting (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in plutodebug (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in playwrgith (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in plasticswampbubble (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pjllow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pirlow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piptyper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipswitch (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlpackagev2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlitetoolsv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlitelibv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlitedblibrary (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlite3extensionv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqlipkgv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipsqlimodv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipsqliext (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipscrape (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piprequester (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piplow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piplibscrape (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piplibraryscraper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piplibcrypto (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in piplibcrypter (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in piplibaryscrape (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in piphttps (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piphelperlib (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in piphack (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipfontslibv2 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipfonts (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipfontingv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipfontingv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipfontinglibaryv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipfontingkitv1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipfontingaddonsv2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipfont (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in pipcryptov4 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcryptov2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pipcryptomodsv2 (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in pipcryptographylibv1 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pipcryptographylibraryv2 (PyPI)
2 compromised versions
Page 86 of 233