PyPI
Every compromised PyPI package we track
531 packages on PyPI, drawn from 84 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.
#(1)
A(23)
B(11)
C(23)
D(20)
E(20)
F(14)
G(13)
H(3)
I(6)
J(2)
K(8)
L(36)
- langchain-core-mcp
- langgrap
- launchdarkly-ai-server-sdk
- libasync
- libcpumineed
- libcraftcontrolcraft
- libcraftosintnvidia
- libcraftreplaceencode
- libcraftsplithacked
- libcraftsplitint
- libcraftstringcc
- libcraftsuperre
- libcrypt
- libcvcandycontrol
- libcvcontrolhydra
- libcvcv
- libcvcvkill
- libcvencode
- libcvgetsplit
- libcvgrandpep
- libcvpiphttp
- libcvpippep
- libcvproofstr
- libcvstred
- libcvverstr
- libedencodemine
- libedlgtbreplace
- libedmcpong
- libedpephttp
- license-utils-kit
- lightning
- litellm
- logcrypt.cryptography
- logutilkit
- lore-cs
- lucy-python-script-2030
M(26)
- magique
- magique-ai
- marketing-mcp
- mathkitlite
- mcp-search-server
- media-manager5
- memoryos
- metricboxlite
- metrics-sdk
- metrio
- mflux-streamlit
- minecraft-ytreceiver
- minecraftaccfinder
- mistralai
- ml-data-shared
- ml-fdbk-shared
- ml-nps-shared
- ml-shared
- mlflow-otel-instrumentor
- mnemonic-py
- morpho-sdk
- mrbios
- mrmustard
- msrcpoc
- multyproccess
- my-private-pkg
N(7)
O(5)
P(57)
- pafer
- pantheon-agents
- pantheon-toolsets
- paysafe-api
- paysafe-payments
- paysafe-sdk
- phabricator-client
- phenopacket-store-toolkit
- platform-telemetry-client
- plp-contract
- poly-check-b
- ppkt2synergy
- praetorian-mind-rce-test-2026
- prosocks
- proxycer
- psbt-helpers
- psbt-utils
- pullgetsage
- py-devoli-common
- py-mccpu
- py-mcedcraft
- py-mcloadpaypal
- py-mcmcmask
- py-mcosint
- py-mcpyw
- py-mcrand
- py-mcrandom
- py-mcultracraft
- py-mcvirtualpy
- py-mineguigrand
- py-minelibcc
- py-minenvidia
- py-minepingsplit
- py-minepipram
- py-minepyencode
- py-minerampy
- py-minereplacesuper
- py-nvidiacandy
- py-nvidiagranded
- py-nvidiaguistr
- py-nvidiahttppep
- py-nvidiahydraget
- py-nvidialibhttp
- py-nvidiapepcontrol
- py-venv-doctor
- py2ops
- pybitjs
- pydanticc
- pygame-renderkit
- pyjstat-smooth
- pymaas
- pymem-win
- pyphetools
- pyservercheck
- pytablute
- python-fork
- python-walletlibr-v
Q(2)
R(42)
- rak-lab-yoav-orca-zrktd2cp5hjmo4x7
- ray-mcp-server
- rc4-secure
- rce-test
- reguestsc
- req-os
- req6
- req7
- reqarg
- reqargs
- reqcrypt
- reqcrypt-dev
- reqcrypts
- reqeist
- reqeosts
- reqesst
- reqest-2022
- reqest-dexfree
- reqests-2
- reqests-2022
- reqests-toolbelt
- reqeuest-2022
- reqeuest-new
- reqeuste
- reqeusts-toolbelt
- reqeustz
- reqeuts
- reqeyst
- reqiest
- reqinstall
- reqjuests
- reqparser
- reqquest
- reqquests
- requests-asetwe
- requests-auroras
- requests-cache-utils
- requests-crypt
- requests-triwes
- riakcs
- rlask
- rsquests
S(22)
T(30)
- tallyboxlite
- tego-managed-agents-test
- telebot-pro
- telegram-helper
- telemetry-helper
- telerape
- telnyx
- tensorflow-opt
- tensorflowlitex
- tensorflows
- tensroflow
- tenssorflow
- tensxxfxxk
- termncolor
- terraformness
- tesorflow
- tiktoken-mcp
- timeweave
- tlask
- tpu-raiden-jax
- transfomers
- trongappy
- trongriden
- trongridet
- trongridev
- trongridew
- trongridme
- trongridor
- tronlinker
- trtllm-subdir-test
U(22)
V(15)
W(20)
X(39)
- xAyOuB-XcTxTeaM
- xinference
- xlsxwrietr
- xlsxwritre
- xlsxwritter
- xoloazfgyobkaw
- xolobwritbrulv
- xolobzvfburelm
- xolodyntlnewtp
- xoloeduccelifz
- xolofmdvxqvbmp
- xoloftiqwxxhje
- xolofyxkotqwko
- xologrekjlqzxj
- xolojbxzzttwpk
- xolojgmnizxche
- xolojhzyppbsow
- xololcuakbzbuu
- xolomjqalvrpmp
- xolonavrylpbeb
- xoloowlowpzeke
- xoloqmotdjpbic
- xolosafhpodvqo
- xolosamsdyhcfa
- xolosxelwsesnp
- xolotcgstfiguu
- xoloulfkhiyywc
- xolovqryjphftd
- xolowqffntthtb
- xoloxwmellxliq
- xoloyuaezcqixu
- xorg-renderproto
- xsltproc
- xsxwriter
- xwormclient
- xxlsxwriter
- xxoo-bale
- xxx-bale
- xyq-drama-skill
Y(36)
- yaml-report-formatter
- yamlformat-tools
- yamlformatter-utils
- yc-as-client
- yeahmankema
- yellorq
- yellyproxies
- yffinance
- yfiance
- yfiannce
- yfiinance
- yfinaance
- yfinace
- yfinacne
- yfinancce
- yfinancee
- yfinane
- yfinanec
- yfinannce
- yfinnace
- yfinnance
- yfinnce
- yfnance
- yfniance
- ygame
- yolov8mini
- youtube-new
- youtubebot
- ypsocks
- ypthon-binance
- ysocks
- yt-api-dlp
- yt-yson-bindings
- ython-binance
- yuzo
- yyfinance
Z(28)
Only versions named by a public advisory are listed. Other versions of these packages are not implicated. Browse incidents