Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 31, 2025
Malicious code in mb-commons (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in loggutils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in localstack-plugin-persistence (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in libfwupdplugin1 (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in leip (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in kwargs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in karma-jasmine-sinon (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in jmdrs (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in hyperon-das-atomdb (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in graphlibx (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in graphex (PyPI)
4 compromised versions
- Jul 31, 2025
Malicious code in graphalgo (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in gcdt-bundler (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in flexiconf (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in filesystem-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in file-writer-control (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-triggers-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-redisdb-exchange-plugin (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-devices-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in exorigsim (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ensmallen-graph (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in duc193 (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ds-lime (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in dfshoesadsm (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in deeprce (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in crawl-requests (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in cppython-core (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in common-test (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in chalk-harness (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in celery-flower (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in catchmeoutsidehawbade (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in carpentry-ci (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bunzbar (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in broccoli-server (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in boto3-batch-utils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bmlx-openapi-client (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bluesadway (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in blackspammerbd-termux (PyPI)
2 compromised versions
- Jul 31, 2025
Malicious code in bitranox-coloredlogs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bioformats (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in bavard-ml-common (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisherman (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aphisher (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in aistac-foundation (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in icare (RubyGems)
1 compromised version
- Jul 31, 2025
Malicious code in icaret (RubyGems)
1 compromised version
- Jul 31, 2025
After a successful phishing attack, new versions of `num2words` were published containing malware.
2 compromised versions
- Jul 31, 2025
Malicious code in nubank-www-latam-commons (npm)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-to-qu (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in prof-tg-go-qu (PyPI)
1 compromised version
Page 6228 of 7,293