Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 12, 2026
Malicious code in google-search-result (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in b10connoisseur (PyPI)
23 compromised versions
- Feb 12, 2026
Malicious code in ritch (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in oraceldb (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in krbutils (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in pydantics (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in pandaai (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in opentelematry-api (PyPI)
1 compromised version
- Feb 12, 2026
Malicious code in marshmellow (PyPI)
2 compromised versions
- Feb 12, 2026
Malicious code in lala6992 (PyPI)
3 compromised versions
- Feb 12, 2026
Malicious code in get-incorrect-name-bob (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in osopackagepy (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in config-toolkit (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in python-files-mod (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in ci-metadata-python-logging (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in tablixs (PyPI)
1 compromised version
- Feb 11, 2026
Malicious code in ntoctfutils (PyPI)
2 compromised versions
- Feb 11, 2026
Malicious code in jsonconfig-utils (PyPI)
9 compromised versions
- Feb 10, 2026
Malicious code in cryptowallethash (PyPI)
3 compromised versions
- Feb 10, 2026
Malicious code in requests-auth-toolkit (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in gpu-discovery (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in rzr-home (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in amplify-python-logging (PyPI)
2 compromised versions
- Feb 10, 2026
Malicious code in vllm-plugins (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in requests-core-plugin (PyPI)
9 compromised versions
- Feb 10, 2026
Malicious code in lyroxpy (PyPI)
2 compromised versions
- Feb 10, 2026
Malicious code in testppe-pkg (PyPI)
1 compromised version
- Feb 10, 2026
Malicious code in dev-pipline-test (PyPI)
4 compromised versions
- Feb 10, 2026
Malicious code in devtools-webhook-cicd-utils (PyPI)
4 compromised versions
- Feb 10, 2026
Malicious code in ntoutils (PyPI)
2 compromised versions
- Feb 9, 2026
Malicious code in thecorrectjames (PyPI)
2 compromised versions
- Feb 9, 2026
Malicious code in ctf-pipline-test (PyPI)
2 compromised versions
- Feb 9, 2026
Malicious code in http-notifier-test (PyPI)
1 compromised version
- Feb 9, 2026
Malicious code in skydeo (PyPI)
1 compromised version
- Feb 8, 2026
Malicious code in teligram (PyPI)
1 compromised version
- Feb 8, 2026
Malicious code in hardixx-code (PyPI)
6 compromised versions
- Feb 8, 2026
Malicious code in grokwrapper (PyPI)
2 compromised versions
- Feb 8, 2026
Malicious code in ccxt-bullish (PyPI)
2 compromised versions
- Feb 8, 2026
Malicious code in thread-pipeline-test (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in carcent (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in gridifies (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in moveworks-pipeline-test (PyPI)
1 compromised version
- Feb 6, 2026
Malicious code in p7zip-full (PyPI)
4 compromised versions
- Feb 6, 2026
Malicious code in adminbypasser (PyPI)
9 compromised versions
- Feb 5, 2026
Malicious code in greeter-pro-test (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in web3-meme-tool (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in metadata-checker (PyPI)
1 compromised version
- Feb 5, 2026
Malicious code in pipelinepoision-test (PyPI)
1 compromised version
- Feb 4, 2026
Malicious code in statssol (PyPI)
2 compromised versions
- Feb 4, 2026
Malicious code in test-for-ppe (PyPI)
1 compromised version
Page 268 of 479