Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 9, 2024
Malicious code in requests-2-32-3 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in replication-delay-client111 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in py-colorprinting (PyPI)
5 compromised versions
- Dec 9, 2024
Malicious code in otci-openthread (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in notoken887 (PyPI)
79 compromised versions
- Dec 9, 2024
Malicious code in newpipv1 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in nasrpy (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in lib-defender (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in infoind (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in frexco-pip-requests (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ffefesaewad (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in fake-usragent (PyPI)
12 compromised versions
- Dec 9, 2024
Malicious code in fabrlce (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in fabricee (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in exodushcate (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in eosio-signerz (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in devilpy (PyPI)
7 compromised versions
- Dec 9, 2024
Malicious code in cutepy32 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in colourema (PyPI)
5 compromised versions
- Dec 9, 2024
Malicious code in colority (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in cipherbcrypto (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in ccl-localstoragerss (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in ccl-localstoragers (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbases (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in ccl-leveldbase (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in bugbounty (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in artifact-lab-3-package-0c8bce1c (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in arielbogo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in akobo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in aiocpa (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afritonpy (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in afriton-py (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afriton (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in afrit-name (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in 48484efej8id (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in xigplayer (npm)
1 compromised version
- Dec 9, 2024
Malicious code in wynn-and-encore (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in wp-zuny (npm)
1 compromised version
- Dec 9, 2024
Malicious code in wordpress-components-slotfill (npm)
1 compromised version
- Dec 9, 2024
Malicious code in woocommerce-grow-jsdoc (npm)
1 compromised version
- Dec 9, 2024
Malicious code in winupdate (npm)
1 compromised version
- Dec 9, 2024
Malicious code in windowsversionupdate (npm)
1 compromised version
- Dec 9, 2024
Malicious code in windowsversioncheck (npm)
1 compromised version
- Dec 9, 2024
Malicious code in widget-session-sample (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in playwright-1.45 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in webpacks-dev-servers (npm)
1 compromised version
- Dec 9, 2024
Malicious code in webpacks-bundles-analyzer (npm)
1 compromised version
- Dec 9, 2024
Malicious code in webpacks-bundle-analyze (npm)
1 compromised version
- Dec 9, 2024
Malicious code in web3-austt (npm)
1 compromised version
- Dec 9, 2024
Malicious code in waveapiv2 (npm)
2 compromised versions
Page 6481 of 7,308