Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,484 total in pypi · sorted newest first- Sep 12, 2026
Malicious code in python-fork (PyPI)
1 compromised version
- Sep 12, 2026
Malicious code in python-fork (PyPI)
2 compromised versions
- Sep 12, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextutils-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextkit-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in eth-account-web3 (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in pymem-win (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in web3-eth-account (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextutils-py (PyPI)
2 compromised versions
- Sep 11, 2026
Malicious code in aitextkit-py (PyPI)
2 compromised versions
- Sep 11, 2026
Malicious code in pymem-win (PyPI)
5 compromised versions
- Sep 11, 2026
Malicious code in eth-account-web3 (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in web3-eth-account (PyPI)
1 compromised version
- Sep 10, 2026
Malicious code in lucy-python-script-2030 (PyPI)
1 compromised version
- Sep 10, 2026
Malicious code in lucy-python-script-2030 (PyPI)
2 compromised versions
- Sep 10, 2026
Malicious code in pylever (PyPI)
1 compromised version
- Sep 10, 2026
Malicious code in websetup (PyPI)
1 compromised version
- Sep 10, 2026
Malicious code in pylever (PyPI)
13 compromised versions
- Sep 9, 2026
Malicious code in bq-sdist-probe-vrp (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in bq-build-probe-vrp-2026 (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in bq-sdist-probe-vrp (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in bq-build-probe-vrp-2026 (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in websetup (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in databricks-webapp-navigation-homepage (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in databricks-webapp-navigation-homepage (PyPI)
1 compromised version
- Sep 9, 2026
Malicious code in py-devoli-common (PyPI)
1 compromised version
- Sep 8, 2026
Malicious code in tsshare (PyPI)
1 compromised version
- Sep 8, 2026
Malicious code in telegram-helper (PyPI)
1 compromised version
- Sep 7, 2026
Malicious code in cv-train (PyPI)
1 compromised version
- Sep 7, 2026
Malicious code in telegram-helper (PyPI)
2 compromised versions
- Sep 7, 2026
Malicious code in cv-train (PyPI)
2 compromised versions
- Sep 6, 2026
Malicious code in dac-tools (PyPI)
1 compromised version
- Sep 6, 2026
Malicious code in dac-tools (PyPI)
1 compromised version
- Sep 6, 2026
Malicious code in minecraftmodes (PyPI)
1 compromised version
- Sep 6, 2026
Malicious code in minecraftmodes (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in trongridew (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in trongridew (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in proxycer (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in proxycer (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in dbt-sa-cli (PyPI)
1 compromised version
- Sep 5, 2026
Malicious code in dbt-sa-cli (PyPI)
1 compromised version
Page 1 of 470