Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Mar 11, 2026
Malicious code in falador (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in collectables (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in collects (PyPI)
3 compromised versions
- Mar 11, 2026
Malicious code in anontest123 (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in safetest123 (PyPI)
1 compromised version
- Mar 10, 2026
Malicious code in synapseml-utils (PyPI)
6 compromised versions
- Mar 9, 2026
Malicious code in hxq-misc-utils-0379 (PyPI)
5 compromised versions
- Mar 9, 2026
Malicious code in bpsm (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in causal-canvas (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in tabformerlite (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in requests-lite (PyPI)
4 compromised versions
- Mar 9, 2026
Malicious code in remjsonparse (PyPI)
7 compromised versions
- Mar 8, 2026
Malicious code in aioutil3 (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in arnavtest123 (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in simple-text-parser (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecosse (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecob (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecox (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecosso (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in xmrig-miner (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in py-sysbench (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in cpucheck (PyPI)
3 compromised versions
- Mar 8, 2026
Malicious code in pyutils-helper (PyPI)
2 compromised versions
- Mar 7, 2026
Malicious code in chat-xdk (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in prateek-yadav23 (PyPI)
1 compromised version
- Mar 6, 2026
Malicious code in flowfix (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in hostlists-plugins-default (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in python-requirements (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in python-module-installer (PyPI)
5 compromised versions
- Mar 6, 2026
Malicious code in fastapi-requests (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in fastapis-requests (PyPI)
1 compromised version
- Mar 4, 2026
Malicious code in requests-ml-min (PyPI)
1 compromised version
- Mar 3, 2026
Malicious code in dakhara (PyPI)
4 compromised versions
- Mar 3, 2026
Malicious code in qwery-core (PyPI)
8 compromised versions
- Mar 3, 2026
Malicious code in spark-ml-utilities (PyPI)
2 compromised versions
- Mar 3, 2026
Malicious code in risk-utilities (PyPI)
2 compromised versions
- Mar 3, 2026
Malicious code in optimal-spark-config (PyPI)
4 compromised versions
- Mar 3, 2026
Malicious code in urllib-slim (PyPI)
6 compromised versions
- Mar 2, 2026
Malicious code in roku-aihub (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in amigapythonupdater (PyPI)
2 compromised versions
- Mar 2, 2026
Malicious code in wisecloudcyberark (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in heimdal-credentials (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in wisecloudsecrets (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython-amigamlserver (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython-rest-server (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in identityapi (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in pyclogger (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in noteasonfnsource (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in botbooster (PyPI)
3 compromised versions
Page 20 of 233