Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Aug 10, 2026
Malicious code in kotoraka (PyPI)
1 compromised version
- Aug 10, 2026
Malicious code in btcflip (PyPI)
1 compromised version
- Aug 10, 2026
Malicious code in pytablute (PyPI)
1 compromised version
- Aug 10, 2026
Malicious code in btcflx (PyPI)
1 compromised version
- Aug 10, 2026
Malicious code in btcflip (PyPI)
1 compromised version
- Aug 10, 2026
Malicious code in kotoraka (PyPI)
1 compromised version
- Aug 9, 2026
Malicious code in kotanku (PyPI)
1 compromised version
- Aug 9, 2026
Malicious code in kotanku (PyPI)
1 compromised version
- Aug 9, 2026
Malicious code in cubesat-upstream-driver (PyPI)
1 compromised version
- Aug 9, 2026
Malicious code in cubesat-upstream-driver (PyPI)
1 compromised version
- Aug 8, 2026
Malicious code in riakcs (PyPI)
1 compromised version
- Aug 8, 2026
Malicious code in riakcs (PyPI)
2 compromised versions
- Aug 7, 2026
Malicious code in atlas-internal (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in atlas-internal (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in speed-hashes (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in cdktn-provider-azurerm (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in cdktn-provider-azurerm (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in speed-hashes (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in pydanticc (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in idnna (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in flasq (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in fast-hashes (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in fastapii (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in fast-hashes (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in idnna (PyPI)
4 compromised versions
- Aug 7, 2026
Malicious code in pydanticc (PyPI)
4 compromised versions
- Aug 7, 2026
Malicious code in fastapii (PyPI)
4 compromised versions
- Aug 7, 2026
Malicious code in flasq (PyPI)
4 compromised versions
- Aug 7, 2026
Malicious code in alphalend-layouts (PyPI)
1 compromised version
- Aug 7, 2026
Malicious code in alphalend-abi (PyPI)
1 compromised version
- Aug 6, 2026
Malicious code in alphalend-abi (PyPI)
3 compromised versions
- Aug 6, 2026
Malicious code in alphalend-layouts (PyPI)
4 compromised versions
- Aug 6, 2026
Malicious code in xayoub-xctxteam (PyPI)
1 compromised version
- Aug 6, 2026
Malicious code in xayoub-xctxteam (PyPI)
3 compromised versions
- Aug 6, 2026
Malicious code in decapod-common (PyPI)
1 compromised version
- Aug 6, 2026
Malicious code in decapod-common (PyPI)
3 compromised versions
- Aug 6, 2026
Malicious code in uncrypt (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in uncrypt (PyPI)
3 compromised versions
- Aug 5, 2026
Malicious code in solana-sniper-bot (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in eth-account-wallet (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in mnemonic-py (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in defi-sdk-py (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in solana-sniper-bot (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in eth-account-wallet (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in defi-sdk-py (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in mnemonic-py (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in numpyp (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in gcli-control (PyPI)
4 compromised versions
- Aug 5, 2026
Malicious code in crypto-wallet-sdk (PyPI)
1 compromised version
- Aug 5, 2026
Malicious code in crypto-trading-toolkit (PyPI)
1 compromised version
Page 14 of 479