Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,178 total in pypi · sorted newest first- May 12, 2026
Malicious code in crazehub (PyPI)
1 compromised version
- May 12, 2026
Malicious code in projz-py (PyPI)
1 compromised version
- May 12, 2026
Malicious code in pirxcypackage (PyPI)
1 compromised version
- May 12, 2026
Malicious code in mymaldependency (PyPI)
1 compromised version
- May 12, 2026
Malicious code in enhancer (PyPI)
1 compromised version
- May 12, 2026
Malicious code in dcchbot (PyPI)
5 compromised versions
- May 12, 2026
Malicious code in guan (PyPI)
2 compromised versions
- May 12, 2026
Malicious code in mistralai (PyPI)
1 compromised version
- May 12, 2026
Malicious code in guardrails-ai (PyPI)
1 compromised version
- May 11, 2026
Malicious code in apkeep (PyPI)
2 compromised versions
- May 11, 2026
Malicious code in openai-spellchecker (PyPI)
1 compromised version
- May 11, 2026
Malicious code in xxx-bale (PyPI)
1 compromised version
- May 11, 2026
Malicious code in mpkg123 (PyPI)
1 compromised version
- May 11, 2026
Malicious code in xxoo-bale (PyPI)
1 compromised version
- May 11, 2026
Malicious code in dlocal-cli (PyPI)
4 compromised versions
- May 10, 2026
Malicious code in django-b64-img (PyPI)
1 compromised version
- May 10, 2026
Malicious code in web3-py-checksum (PyPI)
1 compromised version
- May 9, 2026
Malicious code in textwrap-ext (PyPI)
1 compromised version
- May 9, 2026
Malicious code in textwrap-toolkit (PyPI)
1 compromised version
- May 9, 2026
Malicious code in ggfmttygl-new (PyPI)
6 compromised versions
- May 9, 2026
Malicious code in ggfmttygl (PyPI)
1 compromised version
- May 9, 2026
Malicious code in bttcli (PyPI)
1 compromised version
- May 9, 2026
Malicious code in python-bittensor-config-v2 (PyPI)
1 compromised version
- May 9, 2026
Malicious code in textwrap-formatter (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in ninja-ssh-proto (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in ninja-core-optimizer (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in eth-wallet-kit (PyPI)
1 compromised version
- May 8, 2026
Malicious code in wallet-scanner-pro (PyPI)
1 compromised version
- May 8, 2026
Malicious code in tron-energy-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-bot-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-tool-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in solana-py-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in justinleaguekems (PyPI)
1 compromised version
- May 8, 2026
Malicious code in yeahmankema (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in wallet-utils-pro (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in solana-scanner (PyPI)
1 compromised version
- May 8, 2026
Malicious code in eth-toolkit (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-wallet-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-helper (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-connect (PyPI)
1 compromised version
- May 8, 2026
Malicious code in solana-wallet-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in eth-web3-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-kit-pro (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in solana-wallet-sdk (PyPI)
1 compromised version
- May 7, 2026
Malicious code in ninja-core-utils (PyPI)
1 compromised version
- May 7, 2026
Malicious code in pycacheopt (PyPI)
7 compromised versions
- May 7, 2026
Malicious code in sufiagent (PyPI)
3 compromised versions
- May 7, 2026
Malicious code in dabrius (PyPI)
24 compromised versions
- May 7, 2026
Malicious code in crayrandomiz (PyPI)
3 compromised versions
- May 7, 2026
Malicious code in yc-depconf-test-807dff (PyPI)
2 compromised versions
Page 2 of 224