Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- May 22, 2026
Malicious code in pylogfmt (PyPI)
1 compromised version
- May 21, 2026
Malicious code in mathepy (PyPI)
14 compromised versions
- May 21, 2026
Malicious code in fakehuop (PyPI)
4 compromised versions
- May 21, 2026
Malicious code in pgrayy-wasmtime (PyPI)
2 compromised versions
- May 21, 2026
Malicious code in lognest (PyPI)
5 compromised versions
- May 21, 2026
Malicious code in tensor-compute (PyPI)
1 compromised version
- May 21, 2026
Malicious code in nvidia-nat-semantic-kernel (PyPI)
3 compromised versions
- May 21, 2026
Malicious code in wdt-erpmcp (PyPI)
3 compromised versions
- May 21, 2026
Malicious code in selfservsweeper (PyPI)
1 compromised version
- May 20, 2026
Malicious code in obs-migrate (PyPI)
1 compromised version
- May 20, 2026
Malicious code in instal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in txdpy (PyPI)
1 compromised version
- May 20, 2026
Malicious code in strawberry-graphql (PyPI)
1 compromised version
- May 20, 2026
Malicious code in vlifegram (PyPI)
1 compromised version
- May 20, 2026
Malicious code in libhmac (PyPI)
4 compromised versions
- May 20, 2026
Malicious code in openclaw-agent (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-internal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-commands (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-utils (PyPI)
8 compromised versions
- May 19, 2026
Malicious code in morin (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in aurapro-ui (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in aurafarmer (PyPI)
1 compromised version
- May 19, 2026
Malicious code in silly-logger (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in openirf (PyPI)
1 compromised version
- May 19, 2026
Malicious code in eplang (PyPI)
4 compromised versions
- May 19, 2026
Malicious code in pycalendar-api (PyPI)
1 compromised version
- May 19, 2026
Malicious code in glass-of-water (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in nebulix-ai (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in saas-common-lib-473815 (PyPI)
5 compromised versions
- May 19, 2026
Malicious code in clearml-truen-patch (PyPI)
1 compromised version
- May 19, 2026
Malicious code in soundsource (PyPI)
1 compromised version
- May 19, 2026
Malicious code in buddyme (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in qontract-reconcile (PyPI)
4 compromised versions
- May 19, 2026
Malicious code in crw (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in dabrius-utils (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in durabletask (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in tarpackage (PyPI)
1 compromised version
- May 19, 2026
Malicious code in vfat-ai (PyPI)
1 compromised version
- May 19, 2026
Malicious code in vfat (PyPI)
1 compromised version
- May 18, 2026
Malicious code in solana-web3-alt (PyPI)
2 compromised versions
- May 18, 2026
Malicious code in foundry-utils (PyPI)
4 compromised versions
- May 18, 2026
Malicious code in pyenvprep (PyPI)
1 compromised version
- May 16, 2026
Malicious code in netping (PyPI)
2 compromised versions
- May 15, 2026
Malicious code in venv-utils (PyPI)
3 compromised versions
- May 15, 2026
Malicious code in jatinangor-teleport-testing-zer0id (PyPI)
1 compromised version
- May 14, 2026
Malicious code in sol-batch-transfer-sdk (PyPI)
7 compromised versions
- May 14, 2026
Malicious code in natazx (PyPI)
1 compromised version
- May 14, 2026
Malicious code in tronpath (PyPI)
1 compromised version
- May 14, 2026
Malicious code in pyexecutorsme (PyPI)
8 compromised versions
- May 13, 2026
Malicious code in async-http-tools (PyPI)
1 compromised version
Page 255 of 479