Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- May 4, 2026
Malicious code in rogiant-quick-install (PyPI)
1 compromised version
- May 4, 2026
Malicious code in rogiant (PyPI)
1 compromised version
- May 4, 2026
Malicious code in cloudauth-sdk (PyPI)
1 compromised version
- May 4, 2026
Malicious code in randomchoicemas (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in gauth-client (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan31 (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in rostilesolver (PyPI)
1 compromised version
- May 3, 2026
Malicious code in pwn-control (PyPI)
1 compromised version
- May 3, 2026
Malicious code in metoopro (PyPI)
1 compromised version
- May 3, 2026
Malicious code in win-update-helper-tool-v2 (PyPI)
1 compromised version
- May 3, 2026
Malicious code in system-update-tool (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan4 (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan3 (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in sf-vmeval-requests (PyPI)
1 compromised version
- May 3, 2026
Malicious code in timesmcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timermcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timemcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in protocol-stub-generator (PyPI)
2 compromised versions
- May 2, 2026
Malicious code in aocl-sparse-v3 (PyPI)
3 compromised versions
- May 2, 2026
Malicious code in apexomni-client (PyPI)
1 compromised version
- May 2, 2026
Malicious code in currenttimerlib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in currenttimerpy (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timermcp (PyPI)
1 compromised version
- May 2, 2026
Malicious code in as89ufnaisufn (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timingmcp (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timesmcp (PyPI)
1 compromised version
- May 2, 2026
Malicious code in ziugxfbvo (PyPI)
1 compromised version
- May 1, 2026
Malicious code in graphicctx (PyPI)
1 compromised version
- May 1, 2026
Malicious code in oracle-lag-sniper (PyPI)
1 compromised version
- May 1, 2026
Malicious code in graphicsctxs (PyPI)
1 compromised version
- May 1, 2026
Malicious code in aocl-sparse-v2 (PyPI)
1 compromised version
- May 1, 2026
Malicious code in py-clob-clients (PyPI)
7 compromised versions
- May 1, 2026
Malicious code in tns-py (PyPI)
1 compromised version
- May 1, 2026
Malicious code in aocl-sparse (PyPI)
1 compromised version
- May 1, 2026
Malicious code in my-pipeline-watcher-poc (PyPI)
1 compromised version
- May 1, 2026
Malicious code in httpx-utils (PyPI)
1 compromised version
- May 1, 2026
Malicious code in renderkitcore (PyPI)
1 compromised version
- May 1, 2026
Malicious code in funkratov-renderkit (PyPI)
1 compromised version
- May 1, 2026
Malicious code in chalk-fancy (PyPI)
9 compromised versions
- May 1, 2026
Malicious code in pycryptcore (PyPI)
4 compromised versions
- May 1, 2026
Malicious code in graphicsctxr (PyPI)
8 compromised versions
- May 1, 2026
Malicious code in bxiucnxcb (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in currentclock (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in renderctx (PyPI)
6 compromised versions
- Apr 30, 2026
Malicious code in doisomgcxog (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in buffparser (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in lightning (PyPI)
2 compromised versions
- Apr 30, 2026
Malicious code in timecurrently (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in sdoihgio9sudghsiudbg (PyPI)
1 compromised version
- Apr 30, 2026
Malicious code in robase-dnb (PyPI)
1 compromised version
Page 12 of 233