Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- May 13, 2026
Malicious code in web3-helpers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in math-array-tools (PyPI)
1 compromised version
- May 13, 2026
Malicious code in graddio (PyPI)
1 compromised version
- May 13, 2026
Malicious code in crypto-hash-utils (PyPI)
1 compromised version
- May 13, 2026
Malicious code in aiohttp-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in api-request-helpers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in alembic-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in syntaxlogger (PyPI)
5 compromised versions
- May 13, 2026
Malicious code in trickery (PyPI)
2 compromised versions
- May 13, 2026
Malicious code in hackling (PyPI)
2 compromised versions
- May 13, 2026
Malicious code in workingitmehelpit (PyPI)
1 compromised version
- May 13, 2026
Malicious code in numpy-lib (PyPI)
1 compromised version
- May 13, 2026
Malicious code in pandas-data (PyPI)
1 compromised version
- May 13, 2026
Malicious code in py-requests (PyPI)
1 compromised version
- May 13, 2026
Malicious code in rich-util (PyPI)
1 compromised version
- May 13, 2026
Malicious code in openai-spellcheckers (PyPI)
1 compromised version
- May 13, 2026
Malicious code in d4rktg (PyPI)
1 compromised version
- May 13, 2026
Malicious code in amino-fix (PyPI)
1 compromised version
- May 12, 2026
Malicious code in txwrap (PyPI)
2 compromised versions
- May 12, 2026
Malicious code in always-updates (PyPI)
1 compromised version
- May 12, 2026
Malicious code in ai-spellcheckers (PyPI)
1 compromised version
- May 12, 2026
Malicious code in kaggle-runner (PyPI)
1 compromised version
- May 12, 2026
Malicious code in dlty (PyPI)
2 compromised versions
- May 12, 2026
Malicious code in crazehub (PyPI)
1 compromised version
- May 12, 2026
Malicious code in projz-py (PyPI)
4 compromised versions
- May 12, 2026
Malicious code in pirxcypackage (PyPI)
1 compromised version
- May 12, 2026
Malicious code in mymaldependency (PyPI)
1 compromised version
- May 12, 2026
Malicious code in enhancer (PyPI)
1 compromised version
- May 12, 2026
Malicious code in dcchbot (PyPI)
5 compromised versions
- May 12, 2026
Malicious code in guan (PyPI)
2 compromised versions
- May 12, 2026
Malicious code in mistralai (PyPI)
1 compromised version
- May 12, 2026
Malicious code in guardrails-ai (PyPI)
1 compromised version
- May 11, 2026
Malicious code in apkeep (PyPI)
2 compromised versions
- May 11, 2026
Malicious code in openai-spellchecker (PyPI)
1 compromised version
- May 11, 2026
Malicious code in xxx-bale (PyPI)
1 compromised version
- May 11, 2026
Malicious code in mpkg123 (PyPI)
1 compromised version
- May 11, 2026
Malicious code in xxoo-bale (PyPI)
1 compromised version
- May 11, 2026
Malicious code in dlocal-cli (PyPI)
4 compromised versions
- May 10, 2026
Malicious code in django-b64-img (PyPI)
1 compromised version
- May 10, 2026
Malicious code in web3-py-checksum (PyPI)
2 compromised versions
- May 9, 2026
Malicious code in textwrap-ext (PyPI)
1 compromised version
- May 9, 2026
Malicious code in textwrap-toolkit (PyPI)
1 compromised version
- May 9, 2026
Malicious code in ggfmttygl-new (PyPI)
6 compromised versions
- May 9, 2026
Malicious code in ggfmttygl (PyPI)
1 compromised version
- May 9, 2026
Malicious code in bttcli (PyPI)
1 compromised version
- May 9, 2026
Malicious code in python-bittensor-config-v2 (PyPI)
1 compromised version
- May 9, 2026
Malicious code in textwrap-formatter (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in ninja-ssh-proto (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in ninja-core-optimizer (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in eth-wallet-kit (PyPI)
1 compromised version
Page 256 of 479