Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 20, 2026
Malicious code in shark-e2e-bnsneo (PyPI)
3 compromised versions
- Jul 20, 2026
Malicious code in mysuperlicense (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in mysupergoodpython (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in ibreak (PyPI)
3 compromised versions
- Jul 20, 2026
Malicious code in hello-world-test-mh3 (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in hello-world-test-mh2 (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in paperclip-ai (PyPI)
2 compromised versions
- Jul 20, 2026
Malicious code in neroteam-v1 (PyPI)
8 compromised versions
- Jul 20, 2026
Malicious code in vantrala (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in nemopush (PyPI)
4 compromised versions
- Jul 20, 2026
Malicious code in kimitalk (PyPI)
3 compromised versions
- Jul 20, 2026
Malicious code in kimichat (PyPI)
2 compromised versions
- Jul 20, 2026
Malicious code in telebot-bot-run (PyPI)
3 compromised versions
- Jul 19, 2026
Malicious code in data-parser-utils (PyPI)
1 compromised version
- Jul 18, 2026
Malicious code in tinkoff-cloud-apis-internal (PyPI)
3 compromised versions
- Jul 18, 2026
Malicious code in python-devplatform-client (PyPI)
3 compromised versions
- Jul 18, 2026
Malicious code in mlflow-ui (PyPI)
3 compromised versions
- Jul 18, 2026
Malicious code in trongridev (PyPI)
1 compromised version
- Jul 18, 2026
Malicious code in govpkg (PyPI)
1 compromised version
- Jul 18, 2026
Malicious code in trongridme (PyPI)
1 compromised version
- Jul 17, 2026
Malicious code in dwh-kafka-client (PyPI)
1 compromised version
- Jul 17, 2026
Malicious code in trongridme (PyPI)
1 compromised version
- Jul 17, 2026
Malicious code in govpkg (PyPI)
2 compromised versions
- Jul 17, 2026
Malicious code in trongridev (PyPI)
1 compromised version
- Jul 16, 2026
Malicious code in abseil-py (PyPI)
1 compromised version
- Jul 16, 2026
Malicious code in mfq-private-encoder (PyPI)
1 compromised version
- Jul 16, 2026
Malicious code in dde-common (PyPI)
3 compromised versions
- Jul 16, 2026
Malicious code in darkglitch (PyPI)
4 compromised versions
- Jul 16, 2026
Malicious code in a3s-code (PyPI)
2 compromised versions
- Jul 16, 2026
Malicious code in captcha-solve-api (PyPI)
3 compromised versions
- Jul 16, 2026
Malicious code in airflow-provider-spirit (PyPI)
3 compromised versions
- Jul 16, 2026
Malicious code in ryry-cli (PyPI)
2 compromised versions
- Jul 16, 2026
Malicious code in discordia-telemetria (PyPI)
2 compromised versions
- Jul 16, 2026
Malicious code in discord-telemetry (PyPI)
6 compromised versions
- Jul 15, 2026
Malicious code in qwen-asr-pvt (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in fflask (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in pylogora (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in log-guru (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in trongridweb (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in xyq-drama-skill (PyPI)
3 compromised versions
- Jul 15, 2026
Malicious code in northstart-sdk (PyPI)
4 compromised versions
- Jul 15, 2026
Malicious code in data-proxy-for-test (PyPI)
1 compromised version
- Jul 15, 2026
Malicious code in ethereum-input-decorder (PyPI)
2 compromised versions
- Jul 14, 2026
Malicious code in proxy-checker-j (PyPI)
1 compromised version
- Jul 14, 2026
Malicious code in tronwe (PyPI)
1 compromised version
- Jul 14, 2026
Malicious code in cosmos-gradio (PyPI)
2 compromised versions
- Jul 14, 2026
Malicious code in cosmos-cuda (PyPI)
2 compromised versions
- Jul 14, 2026
Malicious code in proxy-check-ii (PyPI)
1 compromised version
- Jul 14, 2026
Malicious code in tennacity (PyPI)
3 compromised versions
- Jul 14, 2026
Malicious code in pokee-data-utils (PyPI)
1 compromised version
Page 247 of 479