Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Aug 23, 2024
Malicious code in dependency00011124931 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in chatgpt-aitools (PyPI)
4 compromised versions
- Aug 23, 2024
Malicious code in basic-arithmetics (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in azure-projects (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in malware-test-pack-new (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hellopythopyy (PyPI)
5 compromised versions
- Aug 23, 2024
Malicious code in hellopythopy (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in confluent-docker-utils (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in anaconda-anon-usage (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in redis-di-processor (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in oz-merkle-tree (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in formatter-test-package (PyPI)
11 compromised versions
- Aug 23, 2024
Malicious code in unrartest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pyunzip (PyPI)
3 compromised versions
- Aug 22, 2024
Malicious code in bananaholder (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in byted-tbs (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in ttat-api-test (PyPI)
2 compromised versions
- Aug 22, 2024
Malicious code in ttat-api (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in tiktok-session-lite-sdk (PyPI)
5 compromised versions
- Aug 22, 2024
Malicious code in subsys-counter (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in kmvn-ekjvnbwkhjbewv (PyPI)
2 compromised versions
- Aug 22, 2024
Malicious code in byterec-models (PyPI)
1 compromised version
- Aug 22, 2024
Malicious code in byted-rtc-robot-api-v2 (PyPI)
5 compromised versions
- Aug 22, 2024
Malicious code in audit-themis-i18n (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in threading-assistant (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in thethreadingassistant (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in assisting-threading (PyPI)
1 compromised version
- Aug 19, 2024
Malicious code in assistant-threader (PyPI)
1 compromised version
- Aug 14, 2024
Malicious code in aiotrans (PyPI)
6 compromised versions
- Aug 14, 2024
Malicious code in uconst (PyPI)
4 compromised versions
- Aug 12, 2024
Malicious code in cchome-shared (npm)
1 compromised version
- Aug 11, 2024
Malicious code in cargo-hub-ui-api (npm)
1 compromised version
- Aug 11, 2024
Malicious code in cargo-hub-ui-api-internal (npm)
1 compromised version
- Aug 11, 2024
Malicious code in audio-separator-fork (PyPI)
11 compromised versions
- Aug 11, 2024
Malicious code in @live-backstage/client (npm)
1 compromised version
- Aug 11, 2024
Malicious code in @pgc-web/web-creation (npm)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-24ddbc49 (PyPI)
7 compromised versions
- Aug 10, 2024
Malicious code in lab-3-package-438d82fc (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-db7d716a (PyPI)
7 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI)
13 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-76a351f5 (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-6e10193e (PyPI)
6 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-89883da3 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-ccd28738 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)
6 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-9fde789f (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-b55680cd (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-7e532784 (PyPI)
10 compromised versions
Page 6590 of 7,307