Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in webocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websoccket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3rpcs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webbsocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3socket (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3toolz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websocekt-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webscket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webscokets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webosckets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in weboscket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3rpc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webscoket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websign (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web4-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websend (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3toolzfor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3wallet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websocckets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3imports (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3node (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in websckets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webockets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3toolkit-base (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in webbsockets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3evm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3eth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-py9 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-po (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-tool-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-pyy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3connectpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-request (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-pyu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-py-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-p6 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-request-1-8-54 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-p7 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-validator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-pu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3dummycti (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wayspiritmcp-weather (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-py-checksum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-connect (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-validators (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3author (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3automation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3e (PyPI)
1 compromised version
Page 22 of 479