Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jun 29, 2026
Malicious code in rlask (PyPI)
5 compromised versions
- Jun 29, 2026
Malicious code in nhmpy (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jun 29, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jun 29, 2026
Malicious code in django-bkvision (PyPI)
1 compromised version
- Jun 28, 2026
Malicious code in skillspector (PyPI)
8 compromised versions
- Jun 28, 2026
Malicious code in tdata-grabber (PyPI)
1 compromised version
- Jun 28, 2026
Malicious code in fsociety-tools (PyPI)
3 compromised versions
- Jun 28, 2026
Malicious code in pkg-fallback (PyPI)
1 compromised version
- Jun 27, 2026
Malicious code in discord-token-generator (PyPI)
4 compromised versions
- Jun 26, 2026
Malicious code in pdf-converter-pro (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in pyphetools (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in ppkt2synergy (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in phenopacket-store-toolkit (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in inlifegram (PyPI)
2 compromised versions
- Jun 26, 2026
Malicious code in sqligen (PyPI)
8 compromised versions
- Jun 26, 2026
Malicious code in openblox (PyPI)
2 compromised versions
- Jun 25, 2026
Malicious code in extra-huggingface (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in pyext6cc8cd (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in mi-test-99-tuapellido (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in gpsea (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in embiggen (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in python-dateutil2 (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in ensmallen (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in gunicorm (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in ditenv (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in fkaks (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in mcpsever (PyPI)
1 compromised version
- Jun 23, 2026
Malicious code in security-alerts-sdk (PyPI)
4 compromised versions
- Jun 23, 2026
Malicious code in toorc (PyPI)
1 compromised version
- Jun 23, 2026
Malicious code in equest (PyPI)
1 compromised version
- Jun 23, 2026
Malicious code in ip-rotat (PyPI)
1 compromised version
- Jun 22, 2026
Malicious code in inversiones-common (PyPI)
2 compromised versions
- Jun 21, 2026
Malicious code in jsonschema-viewer (PyPI)
1 compromised version
- Jun 20, 2026
Malicious code in requests-enhancer (PyPI)
1 compromised version
- Jun 20, 2026
Malicious code in d0rk3r (PyPI)
16 compromised versions
- Jun 20, 2026
Malicious code in d0rk3r-telemetry (PyPI)
2 compromised versions
- Jun 20, 2026
Malicious code in request-cache-py (PyPI)
11 compromised versions
- Jun 20, 2026
Malicious code in query-profile (PyPI)
3 compromised versions
- Jun 20, 2026
Malicious code in fluent-dashboard-panel-metrics (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in improvado-layout-panel-metrics (PyPI)
2 compromised versions
- Jun 19, 2026
Malicious code in django-auth-middleware-plus (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fastercoding (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fastercode (PyPI)
3 compromised versions
- Jun 19, 2026
Malicious code in shoaib-done-pack (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fluent-panel-metrics (PyPI)
1 compromised version
- Jun 18, 2026
Malicious code in randpicker (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in dotenv-sync (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in disksweep (PyPI)
1 compromised version
Page 250 of 479