Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Apr 25, 2026
Malicious code in ort-moe (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in promptflow-runtime (PyPI)
1 compromised version
- Apr 24, 2026
Malicious code in elementary-data (PyPI)
1 compromised version
- Apr 24, 2026
Malicious code in swampo (PyPI)
20 compromised versions
- Apr 23, 2026
Malicious code in test-pkg-jie (PyPI)
5 compromised versions
- Apr 23, 2026
Malicious code in jie-utility-package (PyPI)
1 compromised version
- Apr 23, 2026
Malicious code in lyroxcoder (PyPI)
6 compromised versions
- Apr 23, 2026
Malicious code in lyrox (PyPI)
4 compromised versions
- Apr 22, 2026
Malicious code in process-support (PyPI)
1 compromised version
- Apr 22, 2026
Malicious code in xinference (PyPI)
3 compromised versions
- Apr 22, 2026
Malicious code in pypdf-fork (PyPI)
2 compromised versions
- Apr 21, 2026
Malicious code in build-metadata-logger (PyPI)
1 compromised version
- Apr 21, 2026
Malicious code in buildenv-collector (PyPI)
2 compromised versions
- Apr 21, 2026
Malicious code in typelimagic (PyPI)
5 compromised versions
- Apr 21, 2026
Malicious code in my-package-jiecub3 (PyPI)
7 compromised versions
- Apr 20, 2026
Malicious code in cycode-dev (PyPI)
1 compromised version
- Apr 20, 2026
Malicious code in pathjoin (PyPI)
7 compromised versions
- Apr 20, 2026
Malicious code in leavemealone (PyPI)
2 compromised versions
- Apr 20, 2026
Malicious code in moonbit-metrics-validator (PyPI)
1 compromised version
- Apr 20, 2026
Malicious code in moonbit-schema-utils (PyPI)
2 compromised versions
- Apr 20, 2026
Malicious code in moonbit-locale-compat (PyPI)
3 compromised versions
- Apr 19, 2026
Malicious code in rblx-studio-api (PyPI)
3 compromised versions
- Apr 19, 2026
Malicious code in robase-setup (PyPI)
4 compromised versions
- Apr 18, 2026
Malicious code in mylib-utils (PyPI)
2 compromised versions
- Apr 18, 2026
Malicious code in rblx-api (PyPI)
1 compromised version
- Apr 18, 2026
Malicious code in stringhelp (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in aet-test (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in shan-lib (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in shan-lib-poc (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in lixxyly (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in shelipp (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in looopiw (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in sher-server-tool (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in sher-net (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in solanakit (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in procoder (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in azure-ai-agentserver-githubcopilot (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in ixosrestinterface (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in keystackutilities (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in loadcoremwassistant (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in restasv3 (PyPI)
4 compromised versions
- Apr 16, 2026
Malicious code in robase-quick-install (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in chainutils (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in pynosist (PyPI)
3 compromised versions
- Apr 16, 2026
Malicious code in genosys (PyPI)
3 compromised versions
- Apr 16, 2026
Malicious code in emergentintegrations (PyPI)
6 compromised versions
- Apr 16, 2026
Malicious code in requests-testik11 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test44 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test3 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test2 (PyPI)
1 compromised version
Page 14 of 233