Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Apr 28, 2026
Malicious code in kcvlib (PyPI)
7 compromised versions
- Apr 28, 2026
Malicious code in genmedia-izumi-agent (PyPI)
2 compromised versions
- Apr 28, 2026
Malicious code in coloreasyprint (PyPI)
3 compromised versions
- Apr 27, 2026
Malicious code in mypypipkg (PyPI)
2 compromised versions
- Apr 27, 2026
Malicious code in robase-ui (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in fetch-data-api-syncapi (PyPI)
3 compromised versions
- Apr 27, 2026
Malicious code in bytedaaa (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedecs (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvke (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedark (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedai (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedmlp (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvefaas (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedfaas (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedclaw (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in byteclaw (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedvod (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedpymysql (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedbackground (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedtccc (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedmem (PyPI)
1 compromised version
- Apr 27, 2026
Malicious code in bytedpgsql (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-fast-install (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-gui-api (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in robase-gui (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in swisscom-ai-research-keyphrase (PyPI)
1 compromised version
- Apr 26, 2026
Malicious code in quicktestybesty (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in quicksolving (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in rosolver (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in pycolorlib001 (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in robase-library-quick-install (PyPI)
3 compromised versions
- Apr 25, 2026
Malicious code in ort-moe (PyPI)
1 compromised version
- Apr 25, 2026
Malicious code in promptflow-runtime (PyPI)
1 compromised version
- Apr 24, 2026
Malicious code in elementary-data (PyPI)
1 compromised version
- Apr 24, 2026
Malicious code in swampo (PyPI)
20 compromised versions
- Apr 23, 2026
Malicious code in test-pkg-jie (PyPI)
5 compromised versions
- Apr 23, 2026
Malicious code in jie-utility-package (PyPI)
1 compromised version
- Apr 23, 2026
Malicious code in lyroxcoder (PyPI)
6 compromised versions
- Apr 23, 2026
Malicious code in lyrox (PyPI)
4 compromised versions
- Apr 22, 2026
Malicious code in process-support (PyPI)
1 compromised version
- Apr 22, 2026
Malicious code in xinference (PyPI)
3 compromised versions
- Apr 22, 2026
Malicious code in pypdf-fork (PyPI)
2 compromised versions
- Apr 21, 2026
Malicious code in build-metadata-logger (PyPI)
1 compromised version
- Apr 21, 2026
Malicious code in buildenv-collector (PyPI)
2 compromised versions
- Apr 21, 2026
Malicious code in typelimagic (PyPI)
5 compromised versions
- Apr 21, 2026
Malicious code in my-package-jiecub3 (PyPI)
7 compromised versions
- Apr 20, 2026
Malicious code in cycode-dev (PyPI)
1 compromised version
- Apr 20, 2026
Malicious code in pathjoin (PyPI)
7 compromised versions
- Apr 20, 2026
Malicious code in leavemealone (PyPI)
2 compromised versions
- Apr 20, 2026
Malicious code in moonbit-metrics-validator (PyPI)
1 compromised version
Page 259 of 479