Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 24, 2026
Malicious code in request-httpx-9 (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in cnnct-eaas-corre (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in request-httpx-4 (PyPI)
1 compromised version
- Feb 23, 2026
Malicious code in scraper-npm (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in myasicapi (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in tensorflow-opt (PyPI)
26 compromised versions
- Feb 22, 2026
Malicious code in trunket-dev-driver (PyPI)
1 compromised version
- Feb 22, 2026
Malicious code in home-robot (PyPI)
2 compromised versions
- Feb 20, 2026
Malicious code in airbnb-identity (PyPI)
2 compromised versions
- Feb 20, 2026
Malicious code in printrables (PyPI)
1 compromised version
- Feb 19, 2026
Malicious code in ethrpc (PyPI)
3 compromised versions
- Feb 19, 2026
Malicious code in web3tool (PyPI)
6 compromised versions
- Feb 19, 2026
Malicious code in ethrpc-accounts (PyPI)
2 compromised versions
- Feb 19, 2026
Malicious code in ethrpc-keys (PyPI)
15 compromised versions
- Feb 19, 2026
Malicious code in pylibcugraphops (PyPI)
3 compromised versions
- Feb 18, 2026
Malicious code in questpro (PyPI)
5 compromised versions
- Feb 18, 2026
Malicious code in telebot-infee (PyPI)
1 compromised version
- Feb 18, 2026
Malicious code in telebot-infoe (PyPI)
1 compromised version
- Feb 18, 2026
Malicious code in telebot-infoo (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in easyreg (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in pywin-simple-gui (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in telebot-infe (PyPI)
1 compromised version
- Feb 17, 2026
Malicious code in telebot-info (PyPI)
2 compromised versions
- Feb 17, 2026
Malicious code in polyutil (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in polyclawd (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in cicibot-fix-message-naming (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in aliyun-python-sdk-v2 (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in alibabacloude (PyPI)
2 compromised versions
- Feb 16, 2026
Malicious code in alibabacloud-code-tool (PyPI)
4 compromised versions
- Feb 16, 2026
Malicious code in groq-ppe-pkg (PyPI)
1 compromised version
- Feb 16, 2026
Malicious code in http-request-toolkit (PyPI)
3 compromised versions
- Feb 16, 2026
Malicious code in malpkgv2-0 (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in dns-execution-test (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in clawdist (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in tronpad (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in marshmellows (PyPI)
1 compromised version
- Feb 15, 2026
Malicious code in strands-agents-anthropic (PyPI)
2 compromised versions
- Feb 15, 2026
Malicious code in requests-toolkit (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in crc32fast (PyPI)
1 compromised version
- Feb 14, 2026
Malicious code in cubaflixdownload (PyPI)
7 compromised versions
- Feb 14, 2026
Malicious code in platforms (PyPI)
7 compromised versions
- Feb 14, 2026
Malicious code in dzuseragents (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in langraph (PyPI)
2 compromised versions
- Feb 14, 2026
Malicious code in magicwolf (PyPI)
4 compromised versions
- Feb 13, 2026
Malicious code in clawdest (PyPI)
6 compromised versions
- Feb 13, 2026
Malicious code in troncloud (PyPI)
4 compromised versions
- Feb 13, 2026
Malicious code in magichat (PyPI)
17 compromised versions
- Feb 13, 2026
Malicious code in displaydoc (PyPI)
1 compromised version
- Feb 13, 2026
Malicious code in acpi-tables (PyPI)
1 compromised version
- Feb 13, 2026
Malicious code in arrayvec (PyPI)
1 compromised version
Page 267 of 479