Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jun 17, 2026
Malicious code in syncagents (PyPI)
2 compromised versions
- Jun 17, 2026
Malicious code in boardflow (PyPI)
2 compromised versions
- Jun 17, 2026
Malicious code in pystylish (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in telegram-lite-grabber (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in tobihook (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in cache-compat-utils (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in temp-development-package-test (PyPI)
4 compromised versions
- Jun 16, 2026
Malicious code in myfirstpackagetestaaa (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in aaaazzzzaz (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in datacamp-light (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in testpackagemanyhttpsgo (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in twrap-toolkit (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in cipherflow (PyPI)
4 compromised versions
- Jun 15, 2026
Malicious code in intel-ai-safety-explainer (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in hello-test-s1 (PyPI)
3 compromised versions
- Jun 15, 2026
Malicious code in merino-common (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in node-scraper (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in dispatch-internal-plugins (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in llvm-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in gigl-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in databricks-tools-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mlir-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in intel-ai-safety (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in sl-pgp (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in kinto-slack (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mozautomation (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in scriptworker-client (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in pyptllm (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in testpgagent (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in neurodrift (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in llmfree (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in gptminifast (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in fastgptmini (PyPI)
6 compromised versions
- Jun 15, 2026
Malicious code in ckanext-dms (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in generatellm (PyPI)
3 compromised versions
- Jun 14, 2026
Malicious code in llamagenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in llmgenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in bash8 (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in ezllmgen (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in easyaillm2 (PyPI)
5 compromised versions
- Jun 14, 2026
Malicious code in easyllmai (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in easyaillm (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in anthropickit (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in salesforce-sysutils-diagnostics (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in dash-grid-normalizer (PyPI)
5 compromised versions
- Jun 12, 2026
Malicious code in textwrap-toolkit-stager (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in flexitest (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in nagios-xi (PyPI)
2 compromised versions
- Jun 12, 2026
Malicious code in jec (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in trongapy (PyPI)
1 compromised version
Page 251 of 479