Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Feb 16, 2026
Malicious code in malpkgv2-0 (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in dns-execution-test (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in clawdist (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in tronpad (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in marshmellows (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in strands-agents-anthropic (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in requests-toolkit (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in crc32fast (PyPI)
1 compromised version
- Feb 14, 2026
Malicious code in cubaflixdownload (PyPI)
7 compromised versions
- Feb 14, 2026
Malicious code in platforms (PyPI)
7 compromised versions
- Feb 14, 2026
Malicious code in dzuseragents (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in langraph (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in magicwolf (PyPI)
4 compromised versions
- Feb 13, 2026
Malicious code in clawdest (PyPI)
6 compromised versions
- Feb 13, 2026
Malicious code in troncloud (PyPI)
4 compromised versions
- Feb 13, 2026
Malicious code in magichat (PyPI)
17 compromised versions
- Feb 13, 2026
Malicious code in displaydoc (PyPI)
1 compromised version
- Feb 13, 2026
Malicious code in acpi-tables (PyPI)
1 compromised version
- Feb 13, 2026
Malicious code in arrayvec (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in google-search-result (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in b10connoisseur (PyPI)
23 compromised versions
- Feb 12, 2026
Malicious code in ritch (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in oraceldb (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in krbutils (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in pydantics (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in pandaai (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in opentelematry-api (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in marshmellow (PyPI)
2 compromised versions
- Feb 12, 2026
Malicious code in lala6992 (PyPI)
3 compromised versions
- Feb 12, 2026
Malicious code in get-incorrect-name-bob (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in osopackagepy (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in config-toolkit (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in python-files-mod (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in ci-metadata-python-logging (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in tablixs (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in ntoctfutils (PyPI)
2 compromised versions
- Feb 11, 2026
Malicious code in jsonconfig-utils (PyPI)
9 compromised versions
- Feb 10, 2026
Malicious code in cryptowallethash (PyPI)
3 compromised versions
- Feb 10, 2026
Malicious code in requests-auth-toolkit (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in gpu-discovery (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in rzr-home (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in amplify-python-logging (PyPI)
2 compromised versions
- Feb 10, 2026
Malicious code in vllm-plugins (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in requests-core-plugin (PyPI)
9 compromised versions
- Feb 10, 2026
Malicious code in lyroxpy (PyPI)
2 compromised versions
- Feb 10, 2026
Malicious code in testppe-pkg (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in dev-pipline-test (PyPI)
4 compromised versions
- Feb 10, 2026
Malicious code in devtools-webhook-cicd-utils (PyPI)
4 compromised versions
- Feb 10, 2026
Malicious code in ntoutils (PyPI)
2 compromised versions
- Feb 9, 2026
Malicious code in thecorrectjames (PyPI)
2 compromised versions
Page 22 of 233