Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Mar 18, 2026
Malicious code in tabullate (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in suficloud (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in quantumania (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in prometheus-quicker-analysis (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in prometheus-quick-analysis (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in prometheus-fast-analysis (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in prometheus-analysis-1 (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in prometheus-analysis (PyPI)
3 compromised versions
- Mar 18, 2026
Malicious code in loveclose2 (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in loveclose1 (PyPI)
6 compromised versions
- Mar 18, 2026
Malicious code in loveclose (PyPI)
5 compromised versions
- Mar 18, 2026
Malicious code in loveahmedclose (PyPI)
10 compromised versions
- Mar 18, 2026
Malicious code in helloharry123t-package (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in ethical-demo-liviy (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in elleuchdhsolvepwn (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in discordrlbypasser (PyPI)
4 compromised versions
- Mar 18, 2026
Malicious code in curl-requester (PyPI)
1 compromised version
- Mar 18, 2026
Malicious code in bigmathutils (PyPI)
3 compromised versions
- Mar 18, 2026
Malicious code in bigmathix (PyPI)
3 compromised versions
- Mar 18, 2026
Malicious code in bigmathex (PyPI)
3 compromised versions
- Mar 18, 2026
Malicious code in async-substrate-interface-sub (PyPI)
2 compromised versions
- Mar 18, 2026
Malicious code in aitrade (PyPI)
2 compromised versions
- Mar 18, 2026
Malicious code in rowrap (PyPI)
15 compromised versions
- Mar 18, 2026
Malicious code in aniresolve (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in anistream (PyPI)
4 compromised versions
- Mar 17, 2026
Malicious code in telegramdatas (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in robloxapi-test (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in robloxapi-testy (PyPI)
1 compromised version
- Mar 16, 2026
Malicious code in chacha-lite-encrypt (PyPI)
1 compromised version
- Mar 16, 2026
Malicious code in pretty-tabulate (PyPI)
2 compromised versions
- Mar 16, 2026
Malicious code in color-list (PyPI)
2 compromised versions
- Mar 16, 2026
Malicious code in codeshouhu (PyPI)
10 compromised versions
- Mar 15, 2026
Malicious code in pymnemonic (PyPI)
3 compromised versions
- Mar 15, 2026
Malicious code in do-not-install-this-package-004 (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in flowpeek (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in kvstore-pb2-grpc (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in dgl-cu117 (PyPI)
2 compromised versions
- Mar 15, 2026
Malicious code in python-anchor (PyPI)
3 compromised versions
- Mar 15, 2026
Malicious code in my-super-lib (PyPI)
4 compromised versions
- Mar 15, 2026
Malicious code in ariadne-federation (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in fastapi-middleware-cors (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in project47 (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in darkig (PyPI)
2 compromised versions
- Mar 13, 2026
Malicious code in ighack (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in nfd (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in nai (PyPI)
16 compromised versions
- Mar 13, 2026
Malicious code in thief-utils (PyPI)
2 compromised versions
- Mar 13, 2026
Malicious code in makenotion-ppetest (PyPI)
2 compromised versions
- Mar 12, 2026
Malicious code in collecters (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in faaladorcli (PyPI)
1 compromised version
Page 19 of 233