Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 13, 2026
Malicious code in 18923aa (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in 123bla (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in 1337test (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in 0x000testqwe (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in browser-use-headless (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in 0-8 (PyPI)
1 compromised version
- Jul 13, 2026
Malicious code in turbocalcng (PyPI)
2 compromised versions
- Jul 12, 2026
Malicious code in fast-dotenv (PyPI)
1 compromised version
- Jul 12, 2026
Malicious code in pipspeed (PyPI)
1 compromised version
- Jul 12, 2026
Malicious code in jupiter-sdk (PyPI)
2 compromised versions
- Jul 12, 2026
Malicious code in eth-agent (PyPI)
2 compromised versions
- Jul 12, 2026
Malicious code in metemask-sdk (PyPI)
2 compromised versions
- Jul 12, 2026
Malicious code in solidity-dev (PyPI)
1 compromised version
- Jul 12, 2026
Malicious code in defi-tools (PyPI)
1 compromised version
- Jul 12, 2026
Malicious code in data-harvester (PyPI)
1 compromised version
- Jul 12, 2026
Malicious code in py-base58 (PyPI)
2 compromised versions
- Jul 10, 2026
Malicious code in turbocalc (PyPI)
1 compromised version
- Jul 10, 2026
Malicious code in sankislayer (PyPI)
1 compromised version
- Jul 9, 2026
Malicious code in proxy-check-i (PyPI)
2 compromised versions
- Jul 9, 2026
Malicious code in qlinforge (PyPI)
1 compromised version
- Jul 9, 2026
Malicious code in playwrightr (PyPI)
2 compromised versions
- Jul 8, 2026
Malicious code in tronsev (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in dbzy-tools (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in turbom (PyPI)
2 compromised versions
- Jul 8, 2026
Malicious code in manom (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in manik (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in tronpak (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in manin (PyPI)
3 compromised versions
- Jul 8, 2026
Malicious code in turbod (PyPI)
8 compromised versions
- Jul 8, 2026
Malicious code in py-slugify (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in rarcore (PyPI)
2 compromised versions
- Jul 8, 2026
Malicious code in oxntime (PyPI)
4 compromised versions
- Jul 8, 2026
Malicious code in tronhapy (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in jsonschemavalid (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in tronhap (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in pyqt6darktheme (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in waymo-waymax (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in tiktoken-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in ray-mcp-server (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in orchestr8-platform (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in openai-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in langchain-core-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in instructor-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in dreamgen (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in jsonschemavalidation (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-sdk (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-payments (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-kyc (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-api (PyPI)
1 compromised version
Page 248 of 479