Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Mar 8, 2026
Malicious code in xmrig-miner (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in py-sysbench (PyPI)
1 compromised version
- Mar 8, 2026
Malicious code in cpucheck (PyPI)
3 compromised versions
- Mar 8, 2026
Malicious code in pyutils-helper (PyPI)
2 compromised versions
- Mar 7, 2026
Malicious code in chat-xdk (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in prateek-yadav23 (PyPI)
1 compromised version
- Mar 6, 2026
Malicious code in flowfix (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in hostlists-plugins-default (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in python-requirements (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in python-module-installer (PyPI)
5 compromised versions
- Mar 6, 2026
Malicious code in fastapi-requests (PyPI)
2 compromised versions
- Mar 6, 2026
Malicious code in fastapis-requests (PyPI)
1 compromised version
- Mar 4, 2026
Malicious code in requests-ml-min (PyPI)
1 compromised version
- Mar 3, 2026
Malicious code in dakhara (PyPI)
4 compromised versions
- Mar 3, 2026
Malicious code in qwery-core (PyPI)
8 compromised versions
- Mar 3, 2026
Malicious code in spark-ml-utilities (PyPI)
2 compromised versions
- Mar 3, 2026
Malicious code in risk-utilities (PyPI)
2 compromised versions
- Mar 3, 2026
Malicious code in optimal-spark-config (PyPI)
4 compromised versions
- Mar 3, 2026
Malicious code in urllib-slim (PyPI)
6 compromised versions
- Mar 2, 2026
Malicious code in roku-aihub (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in amigapythonupdater (PyPI)
2 compromised versions
- Mar 2, 2026
Malicious code in wisecloudcyberark (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in heimdal-credentials (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in wisecloudsecrets (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython-amigamlserver (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in fwk-amigapython-rest-server (PyPI)
1 compromised version
- Mar 2, 2026
Malicious code in identityapi (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in pyclogger (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in noteasonfnsource (PyPI)
1 compromised version
- Mar 1, 2026
Malicious code in botbooster (PyPI)
3 compromised versions
- Feb 28, 2026
Malicious code in jwrincident (PyPI)
2 compromised versions
- Feb 28, 2026
Malicious code in myproject-bola (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in isb (PyPI)
3 compromised versions
- Feb 28, 2026
Malicious code in randomstringgen (PyPI)
4 compromised versions
- Feb 28, 2026
Malicious code in bladebit (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in tchap-bot (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in ctf-toolkit (PyPI)
1 compromised version
- Feb 28, 2026
Malicious code in socketxio (PyPI)
8 compromised versions
- Feb 27, 2026
Malicious code in cdf-clients (PyPI)
1 compromised version
- Feb 27, 2026
Malicious code in hashtools32 (PyPI)
2 compromised versions
- Feb 27, 2026
Malicious code in cicd-ppe-redteam-test02 (PyPI)
3 compromised versions
- Feb 27, 2026
Malicious code in cicd-ppe-redteam-test01 (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in flycord (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in edx-salesforce (PyPI)
1 compromised version
- Feb 26, 2026
Malicious code in awareness-demo-pkg (PyPI)
1 compromised version
- Feb 25, 2026
Malicious code in neural-compressor-jax (PyPI)
2 compromised versions
- Feb 25, 2026
Malicious code in geocommunes-geoportal (PyPI)
2 compromised versions
- Feb 24, 2026
Malicious code in spark-audit-notify (PyPI)
3 compromised versions
- Feb 24, 2026
Malicious code in do-not-install-this-package-003 (PyPI)
1 compromised version
Page 266 of 479