Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Apr 29, 2026
Malicious code in rblx-http (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in rblx-https (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in ro-db (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in bbranger (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in amazon-boto (PyPI)
2 compromised versions
- Apr 29, 2026
Malicious code in timenow-py (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in timenow (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in timemcp-utils (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in timemcp190825790125120985125 (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in timemcp-client (PyPI)
1 compromised version
- Apr 29, 2026
Malicious code in coinmate-api (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in core-roblox-utils (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in robase-start (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in robase-apis (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in sf-th-requests (PyPI)
2 compromised versions
- Apr 28, 2026
Malicious code in timestamp-py (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in timemcp-py (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in fetchapi-syncdata-pypi (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in timemcp (PyPI)
1 compromised version
- Apr 28, 2026
Malicious code in kcvlib (PyPI)
7 compromised versions
- Apr 28, 2026
Malicious code in genmedia-izumi-agent (PyPI)
2 compromised versions
- Apr 28, 2026
Malicious code in coloreasyprint (PyPI)
3 compromised versions
- Apr 27, 2026
Malicious code in mypypipkg (PyPI)
2 compromised versions
- Apr 27, 2026
Malicious code in robase-ui (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in fetch-data-api-syncapi (PyPI)
3 compromised versions
- Apr 27, 2026
Malicious code in bytedaaa (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedecs (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvke (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedark (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedai (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedmlp (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvefaas (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedfaas (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedclaw (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in byteclaw (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvod (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedpymysql (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedbackground (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedtccc (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedmem (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedpgsql (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-fast-install (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-gui-api (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-gui (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in swisscom-ai-research-keyphrase (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in quicktestybesty (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in quicksolving (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in rosolver (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in pycolorlib001 (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in robase-library-quick-install (PyPI)
3 compromised versions
Page 13 of 233