Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jun 6, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in funcdesc (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in pantheon-agents (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-engine (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in coolbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique-ai (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in cmd2func (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in synago (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in okite (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in mrbios (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-http (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in bramin (PyPI)
3 compromised versions
- Jun 6, 2026
Malicious code in uprobe (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in pantheon-toolsets (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in nucbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in napari-ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in anthropy (PyPI)
6 compromised versions
- Jun 5, 2026
Malicious code in goodoltoulas (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in goodoldtoulas (PyPI)
1 compromised version
- Jun 4, 2026
Malicious code in sf-silly-goose-requests (PyPI)
2 compromised versions
- Jun 4, 2026
Malicious code in hpe-glcp-automation-lib (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in tronlabpy3 (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in fia-signals (PyPI)
2 compromised versions
- Jun 3, 2026
Malicious code in tronlab (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in internal-tracker (PyPI)
3 compromised versions
- Jun 3, 2026
Malicious code in spadata (PyPI)
2 compromised versions
- Jun 2, 2026
Malicious code in spaysdata (PyPI)
7 compromised versions
- Jun 2, 2026
Malicious code in spaysrbdata (PyPI)
5 compromised versions
- Jun 2, 2026
Malicious code in jules-test-utils (PyPI)
1 compromised version
- Jun 2, 2026
Malicious code in bt-signal-utils (PyPI)
2 compromised versions
- Jun 2, 2026
Malicious code in quant-backtest-helpers (PyPI)
1 compromised version
- Jun 2, 2026
Malicious code in parsimonius (PyPI)
9 compromised versions
- Jun 1, 2026
Malicious code in imgmatrix-analysis (PyPI)
10 compromised versions
- Jun 1, 2026
Malicious code in redteam-qxz7-utils (PyPI)
1 compromised version
- May 31, 2026
Malicious code in discord-massban (PyPI)
1 compromised version
- May 31, 2026
Malicious code in obfuscation (PyPI)
3 compromised versions
- May 31, 2026
Malicious code in cscc-glass-house (PyPI)
4 compromised versions
- May 31, 2026
Malicious code in hell-cipher (PyPI)
1 compromised version
- May 31, 2026
Malicious code in h4xupdate (PyPI)
1 compromised version
- May 30, 2026
Malicious code in discord-ban (PyPI)
3 compromised versions
- May 30, 2026
Malicious code in neuralforge-ml (PyPI)
1 compromised version
- May 30, 2026
Malicious code in crypto-helper (PyPI)
1 compromised version
- May 30, 2026
Malicious code in cryptolock (PyPI)
2 compromised versions
- May 30, 2026
Malicious code in polymarket-data (PyPI)
2 compromised versions
- May 29, 2026
Malicious code in modulebuild3240234t (PyPI)
4 compromised versions
- May 28, 2026
Malicious code in lib-1779997093-yjeeqn (PyPI)
1 compromised version
Page 253 of 479