Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Dec 29, 2025
Malicious code in awsutil (PyPI)
3 compromised versions
- Dec 29, 2025
Malicious code in smtmlib (PyPI)
2 compromised versions
- Dec 28, 2025
Malicious code in cryptozip (PyPI)
5 compromised versions
- Dec 28, 2025
Malicious code in aiogram-types-v3 (PyPI)
12 compromised versions
- Dec 27, 2025
Malicious code in extrazip (PyPI)
1 compromised version
- Dec 27, 2025
Malicious code in crypo (PyPI)
3 compromised versions
- Dec 27, 2025
Malicious code in crpto (PyPI)
3 compromised versions
- Dec 27, 2025
Malicious code in flaask (PyPI)
4 compromised versions
- Dec 26, 2025
Malicious code in telebot-bot (PyPI)
1 compromised version
- Dec 26, 2025
Malicious code in telegrem (PyPI)
1 compromised version
- Dec 26, 2025
Malicious code in aiogram-3 (PyPI)
2 compromised versions
- Dec 25, 2025
Malicious code in aiogram-sever-patch (PyPI)
5 compromised versions
- Dec 25, 2025
Malicious code in pxdbench (PyPI)
2 compromised versions
- Dec 24, 2025
Malicious code in envtoolsx (PyPI)
1 compromised version
- Dec 24, 2025
Malicious code in livekit-agents-hedra (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in lanchain-openai (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in fireeye-main (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in fire-eye-bcs (PyPI)
3 compromised versions
- Dec 23, 2025
Malicious code in blastchamber-python-pypi (PyPI)
4 compromised versions
- Dec 22, 2025
Malicious code in smtrlib (PyPI)
2 compromised versions
- Dec 22, 2025
Malicious code in unizip (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in hooktest-fin (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in runtimeutils (PyPI)
3 compromised versions
- Dec 21, 2025
Malicious code in colorfulpacket (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in ai-cypher (PyPI)
2 compromised versions
- Dec 19, 2025
Malicious code in system-health-check-test-unique (PyPI)
13 compromised versions
- Dec 19, 2025
Malicious code in connections-api-hidden-runner (PyPI)
2 compromised versions
- Dec 19, 2025
Malicious code in hidden-powershell-runner-ax7 (PyPI)
2 compromised versions
- Dec 18, 2025
Malicious code in f5rest (PyPI)
1 compromised version
- Dec 18, 2025
Malicious code in f5-logger (PyPI)
1 compromised version
- Dec 18, 2025
Malicious code in bigip (PyPI)
1 compromised version
- Dec 17, 2025
Malicious code in trondec (PyPI)
1 compromised version
- Dec 15, 2025
Malicious code in smtblib (PyPI)
2 compromised versions
- Dec 11, 2025
Malicious code in yzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in gxzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in netbenchkit (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in synium (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in jsonschema-utf8 (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in loguru-utf8 (PyPI)
2 compromised versions
- Dec 10, 2025
Malicious code in ctosec-appsec-wb-xray-adapters (PyPI)
6 compromised versions
- Dec 10, 2025
Malicious code in kzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in bigpyx (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in helloharry123c (PyPI)
1 compromised version
- Dec 9, 2025
Malicious code in ctosec-appsec-wb-xray-adapter (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in ajenti-plugin-testing-pyld (PyPI)
3 compromised versions
- Dec 9, 2025
Malicious code in bignum (PyPI)
4 compromised versions
- Dec 9, 2025
Malicious code in do-not-install-this-package-001 (PyPI)
4 compromised versions
- Dec 9, 2025
Malicious code in telcoo (PyPI)
3 compromised versions
- Dec 9, 2025
Malicious code in graphsync (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in raft-dask (PyPI)
2 compromised versions
Page 26 of 233