Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Apr 16, 2026
Malicious code in bombonsec-test-123 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in robase-api (PyPI)
2 compromised versions
- Apr 15, 2026
Malicious code in ccxt-telemetry (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in kyleip (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in cpu-optimizers2-33 (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in cpu-optimizers (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in neverinstallme (PyPI)
7 compromised versions
- Apr 14, 2026
Malicious code in kryptex-os (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in 7miners (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in ant-mcp-proxy-for-test (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in moooo (PyPI)
2 compromised versions
- Apr 14, 2026
Malicious code in buildenv-telemetry (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in hive-os-settings (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in gate-apis (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in svchost (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in pckg-sv (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in robase-install (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in asciitoart (PyPI)
4 compromised versions
- Apr 13, 2026
Malicious code in hive-setting (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in hiveos-setting (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in hiveos-settings (PyPI)
1 compromised version
- Apr 12, 2026
Malicious code in bloxy-api (PyPI)
1 compromised version
- Apr 12, 2026
Malicious code in robase-app (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in robase-fallback (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in robase-installer (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in robase-help (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in databasesupalake (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in api-analysis (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in robase-utils (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in databasesupasafe (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in api-feature (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in ixosmonitoring (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in ks-hex2pcap (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in python-aickerso (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in hex2pcap (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in roboat-utilities (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in robase (PyPI)
2 compromised versions
- Apr 10, 2026
Malicious code in databasetrace (PyPI)
3 compromised versions
- Apr 10, 2026
Malicious code in bogus-nydus-op (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in gd-auth (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in gd-auth-sso (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in customer-local-ops (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in emd-ext (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in yhaplo1 (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in bonsaitree1 (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in siempyl-sumo (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in ttam (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in phasedibd (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in noonhelpers (PyPI)
1 compromised version
- Apr 9, 2026
Malicious code in st-payment (PyPI)
1 compromised version
Page 15 of 233