Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Apr 9, 2026
Malicious code in gc-grocery-api (PyPI)
1 compromised version
- Apr 9, 2026
Malicious code in just4testlm (PyPI)
12 compromised versions
- Apr 8, 2026
Malicious code in kraken-trader (PyPI)
2 compromised versions
- Apr 8, 2026
Malicious code in sentinel-tool (PyPI)
6 compromised versions
- Apr 8, 2026
Malicious code in granulate-utils (PyPI)
1 compromised version
- Apr 8, 2026
Malicious code in gprofiler-logging (PyPI)
1 compromised version
- Apr 8, 2026
Malicious code in roboat-utils (PyPI)
11 compromised versions
- Apr 7, 2026
Malicious code in genesis-1p-tools-rpm-bundle (PyPI)
2 compromised versions
- Apr 7, 2026
Malicious code in databasenaps (PyPI)
2 compromised versions
- Apr 7, 2026
Malicious code in databaselooks (PyPI)
1 compromised version
- Apr 5, 2026
Malicious code in databasetapes (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in databaserobooms (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in databaserotacos (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in photo-extractor (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in discord-request (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in gangomodule (PyPI)
2 compromised versions
- Apr 3, 2026
Malicious code in supervisors (PyPI)
1 compromised version
- Apr 2, 2026
Malicious code in pycolorlib3 (PyPI)
2 compromised versions
- Apr 2, 2026
Malicious code in nwin64tls (PyPI)
1 compromised version
- Apr 2, 2026
Malicious code in nwin32tls (PyPI)
6 compromised versions
- Apr 2, 2026
Malicious code in k8s-node-health (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in eht-account (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in ether-account (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in polymarkets-sdk (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in kube-node-health (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in kube-health-tools (PyPI)
15 compromised versions
- Apr 1, 2026
Malicious code in openai-async-helpers (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in pygithub-async-utils (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in latinum-wallet-mcp (PyPI)
5 compromised versions
- Mar 31, 2026
Malicious code in coredxloader (PyPI)
2 compromised versions
- Mar 31, 2026
Malicious code in officepyai (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in lakeflow-community-connectors (PyPI)
2 compromised versions
- Mar 31, 2026
Malicious code in workingitme (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in databaseroboats (PyPI)
2 compromised versions
- Mar 30, 2026
Malicious code in spanner-client (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in prodaccess (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in dremel (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in loas (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in mnemoniclib (PyPI)
3 compromised versions
- Mar 30, 2026
Malicious code in hiveos-sdk (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in databaseroboat (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in hiveos (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in pychatz (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in safecheckit (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in thisismytestnouser (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in iwantsafecheckit (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in database-roblox (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in interwebz (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in roboats-addition (PyPI)
1 compromised version
Page 16 of 233