Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in btcoinlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in buildenv-telemetry (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bsodinator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in btcli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bttcli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bt-signal-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bsb-family-pack2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bticoinlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in buddyme (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bsb-family-pack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-run (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in breqest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in brotli-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-use-headless (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bsb-backup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-cookies3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bsb-connector (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bruts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bs3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in brrerrere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in boto3-batch-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-history-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bprintoor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bpi-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in broooxddd1414 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bprinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bp2hookutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in broccoli-server (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bs5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in brolool4141412 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bramin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-cookies1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bpsm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in botoceor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in browser-history-analytics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bluesadway (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bnanainstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in blazeted (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bootcampsystem (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in blank-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bloxypy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bmlx-openapi-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in boardflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in boost-tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bogus-nydus-op (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in booto3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in blobhunter-depconf-poc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bobikssf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in blackspammerbd1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bittensor-burn-monitor (PyPI)
1 compromised version
Page 234 of 479