Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jan 14, 2026
Malicious code in solana-program (PyPI)
2 compromised versions
- Jan 14, 2026
Malicious code in soupclaw (PyPI)
8 compromised versions
- Jan 14, 2026
Malicious code in transitive-req (PyPI)
2 compromised versions
- Jan 13, 2026
Malicious code in dify-api (PyPI)
1 compromised version
- Jan 12, 2026
Malicious code in formater (PyPI)
2 compromised versions
- Jan 12, 2026
Malicious code in graponater (PyPI)
1 compromised version
- Jan 11, 2026
Malicious code in libc-dev (PyPI)
2 compromised versions
- Jan 10, 2026
Malicious code in oncecall (PyPI)
1 compromised version
- Jan 8, 2026
Malicious code in do-not-install-this-package-002 (PyPI)
2 compromised versions
- Jan 8, 2026
Malicious code in btcli-security (PyPI)
3 compromised versions
- Jan 7, 2026
Malicious code in lnatainstaller (PyPI)
1 compromised version
- Jan 7, 2026
Malicious code in codefrequencychecker (PyPI)
5 compromised versions
- Jan 6, 2026
Malicious code in py-publish-test-0126 (PyPI)
2 compromised versions
- Jan 6, 2026
Malicious code in testingpy (PyPI)
1 compromised version
- Jan 6, 2026
Malicious code in robustinfer (PyPI)
3 compromised versions
- Jan 6, 2026
Malicious code in pycolorom (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in auto-backup-linux (PyPI)
7 compromised versions
- Jan 5, 2026
Malicious code in auto-backup-macos (PyPI)
6 compromised versions
- Jan 5, 2026
Malicious code in auto-backup-wsl (PyPI)
8 compromised versions
- Jan 5, 2026
Malicious code in auto-backup-wins (PyPI)
5 compromised versions
- Jan 5, 2026
Malicious code in lium-io-gztensor (PyPI)
3 compromised versions
- Jan 5, 2026
Malicious code in lium-4-96 (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in async-substrate-interface-upgrade (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in celium-collateral-upgrade (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in gztensor-cli (PyPI)
6 compromised versions
- Jan 5, 2026
Malicious code in pyrogrom (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aiihttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aoohttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in auohttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aiohtto (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in blobhunter-depconf-poc (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in telstra (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in chrome-stealth (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in qdatainstaller (PyPI)
1 compromised version
- Jan 2, 2026
Malicious code in pdatainstaller (PyPI)
1 compromised version
- Jan 2, 2026
Malicious code in gatr (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in ziphash (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in queryservice-client (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in sfnt2woff-zopfli (PyPI)
2 compromised versions
- Dec 31, 2025
Malicious code in requeses (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in pyrogrqm (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in telegreph (PyPI)
2 compromised versions
- Dec 31, 2025
Malicious code in aiogrem (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in accesspdp (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in brolool4141412 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in broooxddd1414 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in weorewfoi2393 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in pyrogrem (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in umap (PyPI)
3 compromised versions
- Dec 30, 2025
Malicious code in rippling-cli (PyPI)
2 compromised versions
Page 25 of 233