Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in alka10 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alzynitro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amazonfdndn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amtplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amazonpxnau (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aliyun-python-sdk-v2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amino-fix (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alrsnlaseast (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alksdjpureranser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in always-updates (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloude (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aliyun-ai-labs-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alisdkcore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aliyun-oss2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alicloud-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in amplify-python-logging (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airflow-provider-spirit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alpha-booster (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiotrans (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloud-gateway-fc-util-py2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in akatest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aliababcloud-tea-openapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloud-vpc20180317 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in akobo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alembic-util (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloud-code-tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloud-oss2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airnitro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airbnb-identity (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alibabacloud-ecs20180317 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in akh-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alfooou (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alchemyrpcs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ajenti-plugin-testing-pyld (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aistac-foundation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airduq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in akangatu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in alcloud-credentials (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aitrade (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in airtime-media-monitor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiphttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiopbotocore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiosignalasync (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiostreams (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aioohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiolrucache (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aiosync (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aioutil3 (PyPI)
1 compromised version
Page 243 of 479