Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Feb 9, 2026
Malicious code in ctf-pipline-test (PyPI)
2 compromised versions
- Feb 9, 2026
Malicious code in http-notifier-test (PyPI)
1 compromised version
- Feb 9, 2026
Malicious code in skydeo (PyPI)
1 compromised version
- Feb 8, 2026
Malicious code in teligram (PyPI)
1 compromised version
- Feb 8, 2026
Malicious code in hardixx-code (PyPI)
6 compromised versions
- Feb 8, 2026
Malicious code in grokwrapper (PyPI)
2 compromised versions
- Feb 8, 2026
Malicious code in ccxt-bullish (PyPI)
2 compromised versions
- Feb 8, 2026
Malicious code in thread-pipeline-test (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in carcent (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in gridifies (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in moveworks-pipeline-test (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in p7zip-full (PyPI)
4 compromised versions
- Feb 6, 2026
Malicious code in adminbypasser (PyPI)
9 compromised versions
- Feb 5, 2026
Malicious code in greeter-pro-test (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in web3-meme-tool (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in metadata-checker (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in pipelinepoision-test (PyPI)
1 compromised version
- Feb 4, 2026
Malicious code in statssol (PyPI)
2 compromised versions
- Feb 4, 2026
Malicious code in test-for-ppe (PyPI)
1 compromised version
- Feb 4, 2026
Malicious code in tablescene (PyPI)
2 compromised versions
- Feb 4, 2026
Malicious code in cicd-ppe-test (PyPI)
1 compromised version
- Feb 4, 2026
Malicious code in gridifys (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in serpapi-python (PyPI)
2 compromised versions
- Feb 3, 2026
Malicious code in filespath (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tabulapys (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tokyo-ppe-test (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tableshow (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in pathlib-v2-utility (PyPI)
2 compromised versions
- Feb 3, 2026
Malicious code in pathfiles (PyPI)
4 compromised versions
- Feb 3, 2026
Malicious code in tableapys (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in pipeline-poision-test (PyPI)
4 compromised versions
- Feb 2, 2026
Malicious code in cat-admin-tool (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in chia-pool-reference (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in credit-decision-metrics (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in zabitog (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in tableapy (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in callapirequests (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connections-api-requests (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connections-api-request (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connection-api-requests (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in hangimani (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in hultine (PyPI)
6 compromised versions
- Feb 1, 2026
Malicious code in base-local-planner (PyPI)
2 compromised versions
- Feb 1, 2026
Malicious code in marshl (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in genvia-utils (PyPI)
2 compromised versions
- Feb 1, 2026
Malicious code in colorss (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in wandb-widget (PyPI)
2 compromised versions
- Jan 31, 2026
Malicious code in learning-curve-projects (PyPI)
2 compromised versions
- Jan 31, 2026
Malicious code in mkdocs-dataopslive (PyPI)
2 compromised versions
- Jan 30, 2026
Malicious code in fastpi (PyPI)
3 compromised versions
Page 23 of 233