Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 25, 2024
Malicious code in dicuser (PyPI)
5 compromised versions
- Jun 25, 2024
Malicious code in dhawnz (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dhamaka (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dfdfdfdfhhh (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in devide04 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in devicespoofer (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in devicespoof (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dero-pip (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in dependency-confusion123 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-confusion12 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dependency-confusion111 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in demontonto1 (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in demontonto (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in demo-malicious-package (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dekugay (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dcreq (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in dccsx (PyPI)
4 compromised versions
- Jun 25, 2024
Malicious code in datagraph (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-observability-validation (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-observability-core (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-importer-brain (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-dbt (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-airflow-recipes (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in data-platform-airflow-operators (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in darkmanontop (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cxcxcx (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in custvomtkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in custrmtkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in customtkintet (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in customtinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in customtikinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in customekinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in custm (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cusromtkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cusgtomtkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cuolur (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cuolor (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in culturestreak (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in cuatomtkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in ctyps (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cstmotkinter (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cstlsy (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cryztalnitro (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in crystalnitro (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cryptoutilities (PyPI)
1 compromised version
- Jun 25, 2024
Malicious code in cryptolibs (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in cryptographylibs (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in cryptographylibary (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in cryptographylib (PyPI)
2 compromised versions
- Jun 25, 2024
Malicious code in credential-sdk (PyPI)
3 compromised versions
Page 6657 of 7,293