Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- May 8, 2026
Malicious code in wallet-scanner-pro (PyPI)
1 compromised version
- May 8, 2026
Malicious code in tron-energy-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-bot-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-tool-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in solana-py-sdk (PyPI)
1 compromised version
- May 8, 2026
Malicious code in justinleaguekems (PyPI)
1 compromised version
- May 8, 2026
Malicious code in yeahmankema (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in wallet-utils-pro (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in solana-scanner (PyPI)
1 compromised version
- May 8, 2026
Malicious code in eth-toolkit (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-wallet-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-helper (PyPI)
1 compromised version
- May 8, 2026
Malicious code in web3-connect (PyPI)
1 compromised version
- May 8, 2026
Malicious code in solana-wallet-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in eth-web3-utils (PyPI)
1 compromised version
- May 8, 2026
Malicious code in crypto-kit-pro (PyPI)
2 compromised versions
- May 8, 2026
Malicious code in solana-wallet-sdk (PyPI)
1 compromised version
- May 7, 2026
Malicious code in ninja-core-utils (PyPI)
1 compromised version
- May 7, 2026
Malicious code in pycacheopt (PyPI)
7 compromised versions
- May 7, 2026
Malicious code in sufiagent (PyPI)
3 compromised versions
- May 7, 2026
Malicious code in dabrius (PyPI)
24 compromised versions
- May 7, 2026
Malicious code in crayrandomiz (PyPI)
3 compromised versions
- May 7, 2026
Malicious code in yc-depconf-test-807dff (PyPI)
2 compromised versions
- May 7, 2026
Malicious code in runtime-vitals (PyPI)
2 compromised versions
- May 7, 2026
Malicious code in quicklytookerv (PyPI)
2 compromised versions
- May 6, 2026
Malicious code in test-py-conn (PyPI)
2 compromised versions
- May 6, 2026
Malicious code in playwright-atoned (PyPI)
4 compromised versions
- May 6, 2026
Malicious code in playwright-acustomed (PyPI)
1 compromised version
- May 5, 2026
Malicious code in gemini-analyzer (PyPI)
3 compromised versions
- May 5, 2026
Malicious code in runtime-probe (PyPI)
1 compromised version
- May 5, 2026
Malicious code in runtime-readout (PyPI)
1 compromised version
- May 4, 2026
Malicious code in rogiant-quick-install (PyPI)
1 compromised version
- May 4, 2026
Malicious code in rogiant (PyPI)
1 compromised version
- May 4, 2026
Malicious code in cloudauth-sdk (PyPI)
1 compromised version
- May 4, 2026
Malicious code in randomchoicemas (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in gauth-client (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan31 (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in rostilesolver (PyPI)
1 compromised version
- May 3, 2026
Malicious code in pwn-control (PyPI)
1 compromised version
- May 3, 2026
Malicious code in metoopro (PyPI)
1 compromised version
- May 3, 2026
Malicious code in win-update-helper-tool-v2 (PyPI)
1 compromised version
- May 3, 2026
Malicious code in system-update-tool (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan4 (PyPI)
1 compromised version
- May 3, 2026
Malicious code in puan3 (PyPI)
2 compromised versions
- May 3, 2026
Malicious code in sf-vmeval-requests (PyPI)
1 compromised version
- May 3, 2026
Malicious code in timesmcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timermcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in timemcplib (PyPI)
1 compromised version
- May 2, 2026
Malicious code in protocol-stub-generator (PyPI)
2 compromised versions
- May 2, 2026
Malicious code in aocl-sparse-v3 (PyPI)
3 compromised versions
Page 257 of 479