Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Mar 18, 2026
Malicious code in bigmathex (PyPI)
3 compromised versions
- Mar 18, 2026
Malicious code in async-substrate-interface-sub (PyPI)
2 compromised versions
- Mar 18, 2026
Malicious code in aitrade (PyPI)
2 compromised versions
- Mar 18, 2026
Malicious code in rowrap (PyPI)
15 compromised versions
- Mar 18, 2026
Malicious code in aniresolve (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in anistream (PyPI)
4 compromised versions
- Mar 17, 2026
Malicious code in telegramdatas (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in robloxapi-test (PyPI)
1 compromised version
- Mar 17, 2026
Malicious code in robloxapi-testy (PyPI)
1 compromised version
- Mar 16, 2026
Malicious code in chacha-lite-encrypt (PyPI)
1 compromised version
- Mar 16, 2026
Malicious code in pretty-tabulate (PyPI)
2 compromised versions
- Mar 16, 2026
Malicious code in color-list (PyPI)
2 compromised versions
- Mar 16, 2026
Malicious code in codeshouhu (PyPI)
10 compromised versions
- Mar 15, 2026
Malicious code in pymnemonic (PyPI)
3 compromised versions
- Mar 15, 2026
Malicious code in do-not-install-this-package-004 (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in flowpeek (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in kvstore-pb2-grpc (PyPI)
1 compromised version
- Mar 15, 2026
Malicious code in dgl-cu117 (PyPI)
2 compromised versions
- Mar 15, 2026
Malicious code in python-anchor (PyPI)
3 compromised versions
- Mar 15, 2026
Malicious code in my-super-lib (PyPI)
4 compromised versions
- Mar 15, 2026
Malicious code in ariadne-federation (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in fastapi-middleware-cors (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in project47 (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in darkig (PyPI)
2 compromised versions
- Mar 13, 2026
Malicious code in ighack (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in nfd (PyPI)
1 compromised version
- Mar 13, 2026
Malicious code in nai (PyPI)
16 compromised versions
- Mar 13, 2026
Malicious code in thief-utils (PyPI)
2 compromised versions
- Mar 13, 2026
Malicious code in makenotion-ppetest (PyPI)
2 compromised versions
- Mar 12, 2026
Malicious code in collecters (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in faaladorcli (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in falador (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in collectables (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in collects (PyPI)
3 compromised versions
- Mar 11, 2026
Malicious code in anontest123 (PyPI)
1 compromised version
- Mar 11, 2026
Malicious code in safetest123 (PyPI)
1 compromised version
- Mar 10, 2026
Malicious code in synapseml-utils (PyPI)
6 compromised versions
- Mar 9, 2026
Malicious code in hxq-misc-utils-0379 (PyPI)
5 compromised versions
- Mar 9, 2026
Malicious code in bpsm (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in causal-canvas (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in tabformerlite (PyPI)
1 compromised version
- Mar 9, 2026
Malicious code in requests-lite (PyPI)
4 compromised versions
- Mar 9, 2026
Malicious code in remjsonparse (PyPI)
7 compromised versions
- Mar 8, 2026
Malicious code in aioutil3 (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in arnavtest123 (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in simple-text-parser (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecosse (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecob (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecox (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in demozecosso (PyPI)
1 compromised version
Page 265 of 479