PyPI
Every compromised PyPI package we track
374 packages on PyPI, drawn from 35 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.
A(12)
B(5)
C(11)
D(11)
E(14)
F(6)
G(11)
H(1)
I(2)
J(2)
K(5)
L(32)
- langchain-core-mcp
- launchdarkly-ai-server-sdk
- libcpumineed
- libcraftcontrolcraft
- libcraftosintnvidia
- libcraftreplaceencode
- libcraftsplithacked
- libcraftsplitint
- libcraftstringcc
- libcraftsuperre
- libcrypt
- libcvcandycontrol
- libcvcontrolhydra
- libcvcv
- libcvcvkill
- libcvencode
- libcvgetsplit
- libcvgrandpep
- libcvpiphttp
- libcvpippep
- libcvproofstr
- libcvstred
- libcvverstr
- libedencodemine
- libedlgtbreplace
- libedmcpong
- libedpephttp
- license-utils-kit
- lightning
- litellm
- logcrypt.cryptography
- logutilkit
M(13)
N(6)
O(2)
P(39)
- pantheon-agents
- pantheon-toolsets
- paysafe-api
- paysafe-payments
- paysafe-sdk
- phabricator-client
- phenopacket-store-toolkit
- plp-contract
- ppkt2synergy
- psbt-helpers
- psbt-utils
- py-mccpu
- py-mcedcraft
- py-mcloadpaypal
- py-mcmcmask
- py-mcosint
- py-mcpyw
- py-mcrand
- py-mcrandom
- py-mcultracraft
- py-mcvirtualpy
- py-mineguigrand
- py-minelibcc
- py-minenvidia
- py-minepingsplit
- py-minepipram
- py-minepyencode
- py-minerampy
- py-minereplacesuper
- py-nvidiacandy
- py-nvidiagranded
- py-nvidiaguistr
- py-nvidiahttppep
- py-nvidiahydraget
- py-nvidialibhttp
- py-nvidiapepcontrol
- pydanticc
- pyphetools
- pytablute
R(30)
S(11)
T(18)
U(21)
V(5)
W(18)
X(39)
- xAyOuB-XcTxTeaM
- xinference
- xlsxwrietr
- xlsxwritre
- xlsxwritter
- xoloazfgyobkaw
- xolobwritbrulv
- xolobzvfburelm
- xolodyntlnewtp
- xoloeduccelifz
- xolofmdvxqvbmp
- xoloftiqwxxhje
- xolofyxkotqwko
- xologrekjlqzxj
- xolojbxzzttwpk
- xolojgmnizxche
- xolojhzyppbsow
- xololcuakbzbuu
- xolomjqalvrpmp
- xolonavrylpbeb
- xoloowlowpzeke
- xoloqmotdjpbic
- xolosafhpodvqo
- xolosamsdyhcfa
- xolosxelwsesnp
- xolotcgstfiguu
- xoloulfkhiyywc
- xolovqryjphftd
- xolowqffntthtb
- xoloxwmellxliq
- xoloyuaezcqixu
- xorg-renderproto
- xsltproc
- xsxwriter
- xwormclient
- xxlsxwriter
- xxoo-bale
- xxx-bale
- xyq-drama-skill
Y(33)
Z(27)
Only versions named by a public advisory are listed. Other versions of these packages are not implicated. Browse incidents