Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,623 total in pypi · sorted newest first- Jun 25, 2024
Malicious code in pepsi (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pepequests (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pehttps (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pathfound (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pathfinderpy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in passport-snapchat (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in parseweb (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in parser-scrapper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in paquete-1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in papara (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in pandirequests (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in panderequests (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in pandarequest (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in panda-lib (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in paintpy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in packagescraping (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in packagescrape (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in packagename69 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in packagemernoda (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in packagemernado (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in packagecolorslib (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in package-test-index (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in p9llow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in p8llow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in p-cord (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in ovcdtwfcak (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in osystemhtp (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in osinfopkg (PyPI)
8 compromised versions
- Jun 25, 2024
Malicious code in osbeautify (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in onyxproxy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in okinalek (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in oillow (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in od7n (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in obfuscators (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in obfuscater (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in oauthtest123 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in oauthgenerator (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in oauthapimojang (PyPI)
9 compromised versions
- Jun 25, 2024
Malicious code in oauth2gen (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in oauth20-api (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in oauth-less (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in nuker (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in nuke-bot (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in nshack (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in np6helperhttptest (PyPI)
6 compromised versions
- Jun 25, 2024
Malicious code in np6helperhttper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in nowsys (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in nowcl (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in not-so-evil-package-spaceylad (PyPI)
7 compromised versions
- Jun 25, 2024
Malicious code in nonertheguy (PyPI)
1 compromised version
Page 88 of 233