Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,484 total in pypi · sorted newest first- Sep 5, 2026
Malicious code in houdus (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in houdus (PyPI)
2 compromised versions
- Sep 4, 2026
Malicious code in chartkit-core (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in metricboxlite (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in chartkit-core (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in olympuslib (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in pymaas (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in tpu-raiden-jax (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in metricboxlite (PyPI)
2 compromised versions
- Sep 4, 2026
Malicious code in olympuslib (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in pymaas (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in tpu-raiden-jax (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in qoeoe (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in astlsi (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in qoeoe (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in astlsi (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in timeweave (PyPI)
1 compromised version
- Sep 4, 2026
Malicious code in timeweave (PyPI)
10 compromised versions
- Sep 4, 2026
Malicious code in tsshare (PyPI)
16 compromised versions
- Sep 3, 2026
Malicious code in asti (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in asti (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-1requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in 0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in uvhttp-custom (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-2equests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in trongridi (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-1requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-2equests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in py-0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in 0requests (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in uvhttp-custom (PyPI)
3 compromised versions
- Sep 3, 2026
Malicious code in trongridi (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in company-sdk (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in telemetry-helper (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in env-validator-tool (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in company-sdk (PyPI)
1 compromised version
- Sep 3, 2026
Malicious code in env-validator-tool (PyPI)
3 compromised versions
- Sep 3, 2026
Malicious code in telemetry-helper (PyPI)
8 compromised versions
- Sep 2, 2026
Malicious code in syswatch (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in syswatch (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in gcphelpit (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in gcphelpit (PyPI)
3 compromised versions
- Sep 1, 2026
Malicious code in tallyboxlite (PyPI)
1 compromised version
- Sep 1, 2026
Malicious code in tallyboxlite (PyPI)
1 compromised version
- Aug 31, 2026
Malicious code in pyservercheck (PyPI)
1 compromised version
- Aug 31, 2026
Malicious code in pyservercheck (PyPI)
2 compromised versions
- Aug 31, 2026
Malicious code in tronlinker (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in tronlinker (PyPI)
1 compromised version
- Aug 30, 2026
Malicious code in trongridor (PyPI)
1 compromised version
Page 2 of 470