Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in apiclear (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in api-requester2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in api-request-helpers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in antibyfron (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apachelicense (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in api-hypixel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apexomni-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in appsec-script-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aoohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apilogicserver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aocl-sparse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apkeep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apicolors-advanced (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apndas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apply-hive-table (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apache-airflow-providers-edge (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aocl-sparse-v3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aphisher (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in api-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in api-feature (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in appsec-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apihypixel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anontest123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anticheatservice (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anrk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anduril-lattice-sdk-grpc-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anrok (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anistream (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ant-mcp-proxy-for-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ansiicolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ansishade (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amd-taichi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in analyze-me (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aniresolve (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anduril-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amzclients-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in androidspyeye (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anku1-rce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amzn-awsglue (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anku2-rce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anothertestproject (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anthropy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anthropickit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amzn-aws-glue-ml-libs-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amigapythonupdater (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amzn-sagemaker-studio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in anaconda-anon-usage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alicloud-client-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amazon-boto (PyPI)
1 compromised version
Page 242 of 479