Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in wayspiritmcp-tpa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wbe3-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in we3-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wayspiritmcp-enconly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wbsocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-eth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-checksums (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wdt-erpmcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-helper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-checksum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-checksumm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-0py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wbe3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-auto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wdrags (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-meme-tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wb3-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wayspiritmcp-ppa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wdwq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wbesockets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-helpers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wdb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in we3b (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in web3-essential (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wbesocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in walletutility (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in watchitoring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wasig4321 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wave-opensdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in waseem4321 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in waymo-waymax (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wandb-widget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wasi8787878 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in walletweb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wallets-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in walletdecoders (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w3eb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wallet-utils-pro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w3bt00n (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w3socket (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in walletdecoderss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w722-poc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in walletsdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wallet-scanner-pro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w3b (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in w3shi-h1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vyperr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wallettron (PyPI)
1 compromised version
Page 23 of 479