Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,178 total in pypi · sorted newest first- May 22, 2026
Malicious code in pylogfmt (PyPI)
1 compromised version
- May 21, 2026
Malicious code in lognest (PyPI)
5 compromised versions
- May 21, 2026
Malicious code in tensor-compute (PyPI)
1 compromised version
- May 21, 2026
Malicious code in selfservsweeper (PyPI)
1 compromised version
- May 20, 2026
Malicious code in obs-migrate (PyPI)
1 compromised version
- May 20, 2026
Malicious code in instal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in libhmac (PyPI)
4 compromised versions
- May 20, 2026
Malicious code in openclaw-agent (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-internal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-commands (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-utils (PyPI)
8 compromised versions
- May 19, 2026
Malicious code in dabrius-utils (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in durabletask (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in tarpackage (PyPI)
1 compromised version
- May 19, 2026
Malicious code in vfat-ai (PyPI)
1 compromised version
- May 19, 2026
Malicious code in vfat (PyPI)
1 compromised version
- May 18, 2026
Malicious code in solana-web3-alt (PyPI)
2 compromised versions
- May 18, 2026
Malicious code in foundry-utils (PyPI)
4 compromised versions
- May 18, 2026
Malicious code in pyenvprep (PyPI)
1 compromised version
- May 16, 2026
Malicious code in netping (PyPI)
2 compromised versions
- May 15, 2026
Malicious code in venv-utils (PyPI)
3 compromised versions
- May 15, 2026
Malicious code in jatinangor-teleport-testing-zer0id (PyPI)
1 compromised version
- May 14, 2026
Malicious code in sol-batch-transfer-sdk (PyPI)
7 compromised versions
- May 14, 2026
Malicious code in natazx (PyPI)
1 compromised version
- May 14, 2026
Malicious code in tronpath (PyPI)
1 compromised version
- May 14, 2026
Malicious code in pyexecutorsme (PyPI)
8 compromised versions
- May 13, 2026
Malicious code in async-http-tools (PyPI)
1 compromised version
- May 13, 2026
Malicious code in web3-helpers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in math-array-tools (PyPI)
1 compromised version
- May 13, 2026
Malicious code in graddio (PyPI)
1 compromised version
- May 13, 2026
Malicious code in crypto-hash-utils (PyPI)
1 compromised version
- May 13, 2026
Malicious code in aiohttp-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in api-request-helpers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in alembic-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in syntaxlogger (PyPI)
5 compromised versions
- May 13, 2026
Malicious code in trickery (PyPI)
2 compromised versions
- May 13, 2026
Malicious code in hackling (PyPI)
2 compromised versions
- May 13, 2026
Malicious code in workingitmehelpit (PyPI)
1 compromised version
- May 13, 2026
Malicious code in numpy-lib (PyPI)
1 compromised version
- May 13, 2026
Malicious code in pandas-data (PyPI)
1 compromised version
- May 13, 2026
Malicious code in py-requests (PyPI)
1 compromised version
- May 13, 2026
Malicious code in rich-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in openai-spellcheckers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in d4rktg (PyPI)
1 compromised version
- May 13, 2026
Malicious code in amino-fix (PyPI)
1 compromised version
- May 12, 2026
Malicious code in txwrap (PyPI)
2 compromised versions
- May 12, 2026
Malicious code in always-updates (PyPI)
1 compromised version
- May 12, 2026
Malicious code in ai-spellcheckers (PyPI)
1 compromised version
- May 12, 2026
Malicious code in kaggle-runner (PyPI)
1 compromised version
- May 12, 2026
Malicious code in dlty (PyPI)
2 compromised versions
Page 1 of 224