Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in azure-eventhub-checkpointstoretable (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in axonify (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in baibitmf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awscloud-clients-core (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awsutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in baeutifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in azure-projects (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awareness-demo-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auto-backup-wsl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in audit-themis-i18n (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aws-glue (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aws-consoler2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aws-enumerate-iam (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aws-enumerate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in automatic-octo-invention (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auto-backup-wins (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aws-enumerateiam (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in avatar-handler (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auto-backup-linux (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aurm-python-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auto-backup-macos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awesome-tools-collection (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in automsg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in autorequirements (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-17 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aurafarmer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlassian-praz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atomicdecoders (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-22 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in audio-separator-fork (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atomicdecoderss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-13 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-16 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-29 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-21 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-12 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-14 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-19 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-15 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-18 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aurm-desktop-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-20 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auth0-ai-ms-agent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in auth0-open-source-template (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlassian-exp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in authanticetor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in atlasctf-21-prod-09 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in asyncio3 (PyPI)
1 compromised version
Page 239 of 479