Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jan 30, 2026
Malicious code in snapshot-date (PyPI)
4 compromised versions
- Jan 30, 2026
Malicious code in userver-requires-at-least-python-3-10 (PyPI)
2 compromised versions
- Jan 29, 2026
Malicious code in theanswre (PyPI)
4 compromised versions
- Jan 29, 2026
Malicious code in securedrop-workstation-dom0-config (PyPI)
1 compromised version
- Jan 29, 2026
Malicious code in mcp-pdftool-plus (PyPI)
3 compromised versions
- Jan 29, 2026
Malicious code in tableasets (PyPI)
1 compromised version
- Jan 29, 2026
Malicious code in tableautes (PyPI)
2 compromised versions
- Jan 28, 2026
Malicious code in morty-package (PyPI)
1 compromised version
- Jan 28, 2026
Malicious code in pypi-package-explore (PyPI)
7 compromised versions
- Jan 28, 2026
Malicious code in pytorch-mutex (PyPI)
6 compromised versions
- Jan 28, 2026
Malicious code in tabullates (PyPI)
4 compromised versions
- Jan 27, 2026
Malicious code in tabletas (PyPI)
3 compromised versions
- Jan 27, 2026
Malicious code in solhint-plugin-hyperlane (PyPI)
1 compromised version
- Jan 26, 2026
Malicious code in radishwxm5 (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in selenium-integration (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in flask-hookserver (PyPI)
2 compromised versions
- Jan 25, 2026
Malicious code in researchpoc (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in system-integration-toxi (PyPI)
7 compromised versions
- Jan 25, 2026
Malicious code in test-poc-package-for-session (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in test-poc-package-for-session-2 (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in system-integration (PyPI)
2 compromised versions
- Jan 24, 2026
Malicious code in instascan-pro (PyPI)
1 compromised version
- Jan 23, 2026
Malicious code in tableates (PyPI)
6 compromised versions
- Jan 23, 2026
Malicious code in tabletes (PyPI)
3 compromised versions
- Jan 22, 2026
Malicious code in urlsssser (PyPI)
1 compromised version
- Jan 22, 2026
Malicious code in cflashfiles (PyPI)
3 compromised versions
- Jan 22, 2026
Malicious code in urlsser (PyPI)
1 compromised version
- Jan 22, 2026
Malicious code in icloud-recovery (PyPI)
6 compromised versions
- Jan 22, 2026
Malicious code in sympy-dev (PyPI)
4 compromised versions
- Jan 22, 2026
Malicious code in icloudprocessor (PyPI)
6 compromised versions
- Jan 21, 2026
Malicious code in ttam-ploy (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in code-transfering-3 (PyPI)
1 compromised version
- Jan 21, 2026
Malicious code in code-transfering-4 (PyPI)
1 compromised version
- Jan 21, 2026
Malicious code in terminalbrush (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in 1q847 (PyPI)
24 compromised versions
- Jan 21, 2026
Malicious code in xadauiom (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in anduril-lattice-sdk-grpc-python (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in spellcheckpy (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in coolpackage2323 (PyPI)
4 compromised versions
- Jan 20, 2026
Malicious code in spellcheckerpy (PyPI)
3 compromised versions
- Jan 19, 2026
Malicious code in medifile (PyPI)
1 compromised version
- Jan 19, 2026
Malicious code in nanoinstaller (PyPI)
1 compromised version
- Jan 19, 2026
Malicious code in bnanainstaller (PyPI)
1 compromised version
- Jan 18, 2026
Malicious code in urlssser (PyPI)
2 compromised versions
- Jan 18, 2026
Malicious code in marshel (PyPI)
1 compromised version
- Jan 16, 2026
Malicious code in uitil (PyPI)
2 compromised versions
- Jan 14, 2026
Malicious code in haqawi (PyPI)
1 compromised version
- Jan 14, 2026
Malicious code in legendevil1 (PyPI)
1 compromised version
- Jan 14, 2026
Malicious code in hairest (PyPI)
3 compromised versions
- Jan 14, 2026
Malicious code in clipcord (PyPI)
3 compromised versions
Page 24 of 233