Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Mar 25, 2026
Malicious code in vision-service-python-client-internal (PyPI)
2 compromised versions
- Mar 25, 2026
Malicious code in vision-service-python-client (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in hy-api-utilities (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in auth0-ai-ms-agent (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in linting (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in yeshsurya (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in facebookresearch (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in globally (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in fairness-bias (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in v2-8-3 (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-config-engine (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-yang-mgmt (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in kusto (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in sonic-platform-common (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in batch-shipyard (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in aristanetworks (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in python-glue (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in lm-sys (PyPI)
1 compromised version
- Mar 25, 2026
Malicious code in torchunmix (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in mattermost-data-warehouse (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in snooty (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in sentry-filter-forks (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in mattermost-airflow (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in databricks-clean-room-orchestrator (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in compose-rl (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in target-iceberg (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in tap-wordpress (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in roboat-util (PyPI)
2 compromised versions
- Mar 24, 2026
Malicious code in roboated (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in corexloader (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in coreloader (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in stats-helpers (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in open-vp-cal (PyPI)
1 compromised version
- Mar 24, 2026
Two litellm versions published containing credential harvesting malware
2 compromised versions
- Mar 24, 2026
Malicious code in rocketpill (PyPI)
1 compromised version
- Mar 24, 2026
Malicious code in flycalc (PyPI)
2 compromised versions
- Mar 24, 2026
Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)
14 compromised versions
- Mar 24, 2026
Malicious code in litellm (PyPI)
3 compromised versions
- Mar 24, 2026
Malicious code in mgrcfg (PyPI)
3 compromised versions
- Mar 23, 2026
Malicious code in rowrapee (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in roboat (PyPI)
5 compromised versions
- Mar 23, 2026
Malicious code in logutilkit (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in apachelicense (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in hash-utils-py (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in apply-hive-table (PyPI)
2 compromised versions
- Mar 23, 2026
Malicious code in pyregions-snowflake (PyPI)
9 compromised versions
- Mar 23, 2026
Malicious code in dmclc (PyPI)
9 compromised versions
- Mar 23, 2026
Malicious code in modelconftranslator (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in financial-crimes-general-utils (PyPI)
1 compromised version
- Mar 23, 2026
Malicious code in license-utils-kit (PyPI)
9 compromised versions
Page 263 of 479