Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,623 total in pypi · sorted newest first- Jun 25, 2024
Malicious code in libideee (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in libidee (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in libida (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in libid (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in libcrypt (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in libaryscraper (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in libari (PyPI)
3 compromised versions
- Jun 25, 2024
Malicious code in letters-font (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in latencyget (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in lastweb3toolzbro (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in lalaproxy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in l7 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kynlocker (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in ktusvgeqiu (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj12345678 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj1234567 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj1234 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj123 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj12 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kjfgjsfgj (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in killskids-auth (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in kfactionlogger2 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in kfactionlogger (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in kazer12 (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in jxzspwqwup (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in jxhcfdwvun (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in jupyter-pytest-fi-console (PyPI)
7 compromised versions
- Jun 25, 2024
Malicious code in jupitercalc (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in juk (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in judyb-advanced (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in jsbip39-decrypt (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in johnhammondontop183 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in johnhammondfanpackage124 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in jksandbox (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in jfqyotpnvb (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in javapatch (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in jas9do1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in ja3-hashscript (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in isred (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in ipg (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in instarequests (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in instantobfosires (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in instantcolor (PyPI)
7 compromised versions
- Jun 25, 2024
Malicious code in insanepackagev1414 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in insanepackageongong192 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in insanepackageongong11192 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in insanepackage2179824234242342433 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in insanepackage217424422342983 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in insanepackage21724342386744243242983 (PyPI)
1 compromised version
Page 91 of 233