Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Apr 20, 2026
Malicious code in moonbit-schema-utils (PyPI)
2 compromised versions
- Apr 20, 2026
Malicious code in moonbit-locale-compat (PyPI)
3 compromised versions
- Apr 19, 2026
Malicious code in rblx-studio-api (PyPI)
3 compromised versions
- Apr 19, 2026
Malicious code in robase-setup (PyPI)
4 compromised versions
- Apr 18, 2026
Malicious code in mylib-utils (PyPI)
2 compromised versions
- Apr 18, 2026
Malicious code in rblx-api (PyPI)
1 compromised version
- Apr 18, 2026
Malicious code in stringhelp (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in aet-test (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in shan-lib (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in shan-lib-poc (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in lixxyly (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in shelipp (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in looopiw (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in sher-server-tool (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in sher-net (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in solanakit (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in procoder (PyPI)
1 compromised version
- Apr 17, 2026
Malicious code in azure-ai-agentserver-githubcopilot (PyPI)
2 compromised versions
- Apr 17, 2026
Malicious code in ixosrestinterface (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in keystackutilities (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in loadcoremwassistant (PyPI)
4 compromised versions
- Apr 17, 2026
Malicious code in restasv3 (PyPI)
4 compromised versions
- Apr 16, 2026
Malicious code in robase-quick-install (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in chainutils (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in pynosist (PyPI)
3 compromised versions
- Apr 16, 2026
Malicious code in genosys (PyPI)
3 compromised versions
- Apr 16, 2026
Malicious code in emergentintegrations (PyPI)
6 compromised versions
- Apr 16, 2026
Malicious code in requests-testik11 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test44 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test3 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in requests-test-test2 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in bombonsec-test-123 (PyPI)
1 compromised version
- Apr 16, 2026
Malicious code in robase-api (PyPI)
2 compromised versions
- Apr 15, 2026
Malicious code in ccxt-telemetry (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in kyleip (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in cpu-optimizers2-33 (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in cpu-optimizers (PyPI)
1 compromised version
- Apr 15, 2026
Malicious code in neverinstallme (PyPI)
7 compromised versions
- Apr 14, 2026
Malicious code in kryptex-os (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in 7miners (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in ant-mcp-proxy-for-test (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in moooo (PyPI)
2 compromised versions
- Apr 14, 2026
Malicious code in buildenv-telemetry (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in hive-os-settings (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in gate-apis (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in svchost (PyPI)
1 compromised version
- Apr 14, 2026
Malicious code in pckg-sv (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in robase-install (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in asciitoart (PyPI)
4 compromised versions
- Apr 13, 2026
Malicious code in hive-setting (PyPI)
1 compromised version
Page 260 of 479