Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in candyinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byterec-models (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in candycraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in c8tsdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytepps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytepilot-0-0-15 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in c8tks94kspjghtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byteqs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytekafka0-0-15 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byteseep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytesip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytepilot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytemlperf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in c2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytesap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytesp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in c8test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytekit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedtccc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedplus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedvod (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedpgsql (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytekafka-0-0-15 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedplus-rec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedbackground (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedvefaas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedmlp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedmemfdd345 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedsp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedclaw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedance-chat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytekafka (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedtrace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byteff (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedmem (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedark (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytekafka-0-15 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedfaas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedpymysql (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedvke (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bytedecs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bussardweg4a (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-web (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bussardweg4av3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byted-rtc-robot-api-v2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byteclaw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bunzbar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in byted-tbs (PyPI)
1 compromised version
Page 233 of 480