Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Apr 2, 2026
Malicious code in nwin32tls (PyPI)
6 compromised versions
- Apr 2, 2026
Malicious code in k8s-node-health (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in eht-account (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in ether-account (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in polymarkets-sdk (PyPI)
2 compromised versions
- Apr 1, 2026
Malicious code in kube-node-health (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in kube-health-tools (PyPI)
15 compromised versions
- Apr 1, 2026
Malicious code in openai-async-helpers (PyPI)
1 compromised version
- Apr 1, 2026
Malicious code in pygithub-async-utils (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in latinum-wallet-mcp (PyPI)
5 compromised versions
- Mar 31, 2026
Malicious code in coredxloader (PyPI)
2 compromised versions
- Mar 31, 2026
Malicious code in officepyai (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in lakeflow-community-connectors (PyPI)
2 compromised versions
- Mar 31, 2026
Malicious code in workingitme (PyPI)
1 compromised version
- Mar 31, 2026
Malicious code in zzzzthisisitwantsafecheckitzzzz (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in databaseroboats (PyPI)
2 compromised versions
- Mar 30, 2026
Malicious code in spanner-client (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in prodaccess (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in dremel (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in loas (PyPI)
1 compromised version
- Mar 30, 2026
Malicious code in mnemoniclib (PyPI)
3 compromised versions
- Mar 30, 2026
Malicious code in hiveos-sdk (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in databaseroboat (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in hiveos (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in pychatz (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in safecheckit (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in thisismytestnouser (PyPI)
2 compromised versions
- Mar 29, 2026
Malicious code in iwantsafecheckit (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in database-roblox (PyPI)
1 compromised version
- Mar 29, 2026
Malicious code in interwebz (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in roboats-addition (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in roboat-additions (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in roboat-addition (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in python-aiogram-telegram-updater (PyPI)
1 compromised version
- Mar 28, 2026
Malicious code in aiogram-photo-updater (PyPI)
2 compromised versions
- Mar 27, 2026
Malicious code in copytrading (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in trustwallet (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in metamask-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in claude-lite (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in solana-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in gemini-ai-api (PyPI)
1 compromised version
- Mar 27, 2026
Malicious code in thisismytest123 (PyPI)
2 compromised versions
- Mar 27, 2026
Malicious code in telnyx (PyPI)
2 compromised versions
- Mar 26, 2026
Malicious code in requests-testik111 (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in fluxhttp (PyPI)
3 compromised versions
- Mar 26, 2026
Malicious code in somepentest-test-package (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in chaostoolkit-turbulence (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in magtape (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in pacbot (PyPI)
1 compromised version
- Mar 26, 2026
Malicious code in lightmock (PyPI)
1 compromised version
Page 262 of 479