Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,558 total in pypi · sorted newest first- Jul 7, 2026
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-install-execution (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pycryptoshuffle (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in piirgg (PyPI)
4 compromised versions
- Jul 7, 2026
Malicious code in notrandompacketname (PyPI)
3 compromised versions
- Jul 7, 2026
Malicious code in myproject234 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-payments (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-logging (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-auth (PyPI)
1 compromised version
- Jul 4, 2026
Malicious code in urlllib321 (PyPI)
2 compromised versions
- Jul 4, 2026
Malicious code in httpprobe (PyPI)
1 compromised version
- Jul 4, 2026
Malicious code in yt-api-dlp (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in bytekit (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in schemavault (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in confighub (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in procwire (PyPI)
4 compromised versions
- Jul 3, 2026
Malicious code in ipa-user-collector (PyPI)
1 compromised version
- Jul 3, 2026
Malicious code in haproxy-config-client (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in horde-python-client (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in epic-build-scripts (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in ue-python-tools (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in unreal-mladapter (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in dt-validator (PyPI)
1 compromised version
- Jul 1, 2026
Malicious code in uprobe (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in ufish (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in synago (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in pantheon-toolsets (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in pantheon-agents (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in starlette-healthcheck (PyPI)
3 compromised versions
- Jul 1, 2026
Malicious code in okite (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in twrap-tool (PyPI)
1 compromised version
- Jul 1, 2026
Malicious code in nucbox (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in napari-ufish (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in mrbios (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in magique-ai (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in magique (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in funcdesc (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in executor-http (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in executor-engine (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in coolbox (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in cmd2func (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in bramin (PyPI)
3 compromised versions
- Jun 29, 2026
Malicious code in tlask (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in rlask (PyPI)
5 compromised versions
- Jun 29, 2026
Malicious code in nhmpy (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
Page 2 of 232