Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Feb 28, 2026
Malicious code in jwrincident (PyPI)
2 compromised versions
- Feb 28, 2026
Malicious code in myproject-bola (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in isb (PyPI)
3 compromised versions
- Feb 28, 2026
Malicious code in randomstringgen (PyPI)
4 compromised versions
- Feb 28, 2026
Malicious code in bladebit (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in tchap-bot (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in ctf-toolkit (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in socketxio (PyPI)
8 compromised versions
- Feb 27, 2026
Malicious code in cdf-clients (PyPI)
1 compromised version
- Feb 27, 2026
Malicious code in hashtools32 (PyPI)
2 compromised versions
- Feb 27, 2026
Malicious code in cicd-ppe-redteam-test02 (PyPI)
3 compromised versions
- Feb 27, 2026
Malicious code in cicd-ppe-redteam-test01 (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in flycord (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in edx-salesforce (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in awareness-demo-pkg (PyPI)
1 compromised version
- Feb 25, 2026
Malicious code in neural-compressor-jax (PyPI)
2 compromised versions
- Feb 25, 2026
Malicious code in geocommunes-geoportal (PyPI)
2 compromised versions
- Feb 24, 2026
Malicious code in spark-audit-notify (PyPI)
3 compromised versions
- Feb 24, 2026
Malicious code in do-not-install-this-package-003 (PyPI)
1 compromised version
- Feb 24, 2026
Malicious code in request-httpx-9 (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in cnnct-eaas-corre (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in request-httpx-4 (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in scraper-npm (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in myasicapi (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in tensorflow-opt (PyPI)
26 compromised versions
- Feb 22, 2026
Malicious code in trunket-dev-driver (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in home-robot (PyPI)
2 compromised versions
- Feb 20, 2026
Malicious code in airbnb-identity (PyPI)
2 compromised versions
- Feb 20, 2026
Malicious code in printrables (PyPI)
1 compromised version
- Feb 19, 2026
Malicious code in ethrpc (PyPI)
3 compromised versions
- Feb 19, 2026
Malicious code in web3tool (PyPI)
6 compromised versions
- Feb 19, 2026
Malicious code in ethrpc-accounts (PyPI)
2 compromised versions
- Feb 19, 2026
Malicious code in ethrpc-keys (PyPI)
15 compromised versions
- Feb 19, 2026
Malicious code in pylibcugraphops (PyPI)
3 compromised versions
- Feb 18, 2026
Malicious code in questpro (PyPI)
5 compromised versions
- Feb 18, 2026
Malicious code in telebot-infee (PyPI)
1 compromised version
- Feb 18, 2026
Malicious code in telebot-infoe (PyPI)
1 compromised version
- Feb 18, 2026
Malicious code in telebot-infoo (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in easyreg (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in pywin-simple-gui (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in telebot-infe (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in telebot-info (PyPI)
2 compromised versions
- Feb 17, 2026
Malicious code in polyutil (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in polyclawd (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in cicibot-fix-message-naming (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in aliyun-python-sdk-v2 (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in alibabacloude (PyPI)
2 compromised versions
- Feb 16, 2026
Malicious code in alibabacloud-code-tool (PyPI)
4 compromised versions
- Feb 16, 2026
Malicious code in groq-ppe-pkg (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in http-request-toolkit (PyPI)
3 compromised versions
Page 21 of 233