Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Sep 4, 2026
Malicious code in astlsi (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in timeweave (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in timeweave (PyPI)
10 compromised versions
- Sep 4, 2026
Malicious code in tsshare (PyPI)
20 compromised versions
- Sep 3, 2026
Malicious code in asti (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in asti (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-1requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in 0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in uvhttp-custom (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-2equests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in trongridi (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-1requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-2equests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in 0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in uvhttp-custom (PyPI)
3 compromised versions
- Sep 3, 2026
Malicious code in trongridi (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in company-sdk (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in telemetry-helper (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in env-validator-tool (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in company-sdk (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in env-validator-tool (PyPI)
3 compromised versions
- Sep 3, 2026
Malicious code in telemetry-helper (PyPI)
8 compromised versions
- Sep 2, 2026
Malicious code in syswatch (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in syswatch (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in gcphelpit (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in gcphelpit (PyPI)
3 compromised versions
- Sep 1, 2026
Malicious code in tallyboxlite (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in tallyboxlite (PyPI)
1 compromised version
- Aug 31, 2026
Malicious code in pyservercheck (PyPI)
1 compromised version
- Aug 31, 2026
Malicious code in pyservercheck (PyPI)
2 compromised versions
- Aug 31, 2026
Malicious code in tronlinker (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in tronlinker (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in trongridor (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in auth-app-streamlit (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in auth-app-streamlit (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in trongridor (PyPI)
1 compromised version
- Aug 29, 2026
Malicious code in flask-header-guard (PyPI)
1 compromised version
- Aug 29, 2026
Malicious code in flask-header-guard (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in calcboxlite (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in calcboxlite (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yamlformatter-utils (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yamlformat-tools (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in pygame-renderkit (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yaml-report-formatter (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yamlformat-tools (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yamlformatter-utils (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in pygame-renderkit (PyPI)
1 compromised version
- Aug 28, 2026
Malicious code in yaml-report-formatter (PyPI)
3 compromised versions
Page 11 of 479