Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Apr 13, 2026
Malicious code in hiveos-setting (PyPI)
1 compromised version
- Apr 13, 2026
Malicious code in hiveos-settings (PyPI)
1 compromised version
- Apr 12, 2026
Malicious code in bloxy-api (PyPI)
1 compromised version
- Apr 12, 2026
Malicious code in robase-app (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in robase-fallback (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in robase-installer (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in robase-help (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in databasesupalake (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in api-analysis (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in robase-utils (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in databasesupasafe (PyPI)
2 compromised versions
- Apr 11, 2026
Malicious code in api-feature (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in ixosmonitoring (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in ks-hex2pcap (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in python-aickerso (PyPI)
1 compromised version
- Apr 11, 2026
Malicious code in hex2pcap (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in roboat-utilities (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in robase (PyPI)
2 compromised versions
- Apr 10, 2026
Malicious code in databasetrace (PyPI)
3 compromised versions
- Apr 10, 2026
Malicious code in bogus-nydus-op (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in gd-auth (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in gd-auth-sso (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in customer-local-ops (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in emd-ext (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in yhaplo1 (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in bonsaitree1 (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in siempyl-sumo (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in ttam (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in phasedibd (PyPI)
1 compromised version
- Apr 10, 2026
Malicious code in noonhelpers (PyPI)
1 compromised version
- Apr 9, 2026
Malicious code in st-payment (PyPI)
1 compromised version
- Apr 9, 2026
Malicious code in gc-grocery-api (PyPI)
1 compromised version
- Apr 9, 2026
Malicious code in just4testlm (PyPI)
12 compromised versions
- Apr 8, 2026
Malicious code in kraken-trader (PyPI)
2 compromised versions
- Apr 8, 2026
Malicious code in sentinel-tool (PyPI)
6 compromised versions
- Apr 8, 2026
Malicious code in granulate-utils (PyPI)
1 compromised version
- Apr 8, 2026
Malicious code in gprofiler-logging (PyPI)
1 compromised version
- Apr 8, 2026
Malicious code in roboat-utils (PyPI)
11 compromised versions
- Apr 7, 2026
Malicious code in genesis-1p-tools-rpm-bundle (PyPI)
2 compromised versions
- Apr 7, 2026
Malicious code in databasenaps (PyPI)
2 compromised versions
- Apr 7, 2026
Malicious code in databaselooks (PyPI)
1 compromised version
- Apr 5, 2026
Malicious code in databasetapes (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in databaserobooms (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in databaserotacos (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in photo-extractor (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in discord-request (PyPI)
1 compromised version
- Apr 4, 2026
Malicious code in gangomodule (PyPI)
2 compromised versions
- Apr 3, 2026
Malicious code in supervisors (PyPI)
1 compromised version
- Apr 2, 2026
Malicious code in pycolorlib3 (PyPI)
2 compromised versions
- Apr 2, 2026
Malicious code in nwin64tls (PyPI)
1 compromised version
Page 261 of 479