Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Mar 28, 2026
Malicious code in roboat-additions (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in roboat-addition (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in python-aiogram-telegram-updater (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in aiogram-photo-updater (PyPI)
2 compromised versions
- Mar 27, 2026
Malicious code in copytrading (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in trustwallet (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in metamask-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in claude-lite (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in solana-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in gemini-ai-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in thisismytest123 (PyPI)
2 compromised versions
- Mar 27, 2026
Malicious code in telnyx (PyPI)
2 compromised versions
- Mar 26, 2026
Malicious code in requests-testik111 (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in fluxhttp (PyPI)
3 compromised versions
- Mar 26, 2026
Malicious code in somepentest-test-package (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in chaostoolkit-turbulence (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in magtape (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in pacbot (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in lightmock (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in vision-service-python-client-internal (PyPI)
2 compromised versions
- Mar 25, 2026
Malicious code in vision-service-python-client (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in hy-api-utilities (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in auth0-ai-ms-agent (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in linting (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in yeshsurya (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in facebookresearch (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in globally (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in fairness-bias (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in v2-8-3 (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-config-engine (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-yang-mgmt (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in kusto (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-platform-common (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in batch-shipyard (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in aristanetworks (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in python-glue (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in lm-sys (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in torchunmix (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in mattermost-data-warehouse (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in snooty (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in sentry-filter-forks (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in mattermost-airflow (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in databricks-clean-room-orchestrator (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in compose-rl (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in target-iceberg (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in tap-wordpress (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in roboat-util (PyPI)
2 compromised versions
- Mar 24, 2026
Malicious code in roboated (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in corexloader (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in coreloader (PyPI)
1 compromised version
Page 17 of 233