Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Feb 4, 2026
Malicious code in tablescene (PyPI)
2 compromised versions
- Feb 4, 2026
Malicious code in cicd-ppe-test (PyPI)
1 compromised version
- Feb 4, 2026
Malicious code in gridifys (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in serpapi-python (PyPI)
2 compromised versions
- Feb 3, 2026
Malicious code in filespath (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tabulapys (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tokyo-ppe-test (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in tableshow (PyPI)
1 compromised version
- Feb 3, 2026
Malicious code in pathlib-v2-utility (PyPI)
2 compromised versions
- Feb 3, 2026
Malicious code in pathfiles (PyPI)
4 compromised versions
- Feb 3, 2026
Malicious code in tableapys (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in pipeline-poision-test (PyPI)
4 compromised versions
- Feb 2, 2026
Malicious code in cat-admin-tool (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in chia-pool-reference (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in credit-decision-metrics (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in zabitog (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in tableapy (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in callapirequests (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connections-api-requests (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connections-api-request (PyPI)
1 compromised version
- Feb 2, 2026
Malicious code in connection-api-requests (PyPI)
2 compromised versions
- Feb 2, 2026
Malicious code in hangimani (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in hultine (PyPI)
6 compromised versions
- Feb 1, 2026
Malicious code in base-local-planner (PyPI)
2 compromised versions
- Feb 1, 2026
Malicious code in marshl (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in genvia-utils (PyPI)
2 compromised versions
- Feb 1, 2026
Malicious code in colorss (PyPI)
1 compromised version
- Feb 1, 2026
Malicious code in wandb-widget (PyPI)
2 compromised versions
- Jan 31, 2026
Malicious code in learning-curve-projects (PyPI)
2 compromised versions
- Jan 31, 2026
Malicious code in mkdocs-dataopslive (PyPI)
2 compromised versions
- Jan 30, 2026
Malicious code in fastpi (PyPI)
3 compromised versions
- Jan 30, 2026
Malicious code in snapshot-date (PyPI)
4 compromised versions
- Jan 30, 2026
Malicious code in userver-requires-at-least-python-3-10 (PyPI)
2 compromised versions
- Jan 29, 2026
Malicious code in theanswre (PyPI)
4 compromised versions
- Jan 29, 2026
Malicious code in securedrop-workstation-dom0-config (PyPI)
1 compromised version
- Jan 29, 2026
Malicious code in mcp-pdftool-plus (PyPI)
3 compromised versions
- Jan 29, 2026
Malicious code in tableasets (PyPI)
1 compromised version
- Jan 29, 2026
Malicious code in tableautes (PyPI)
2 compromised versions
- Jan 28, 2026
Malicious code in morty-package (PyPI)
1 compromised version
- Jan 28, 2026
Malicious code in pypi-package-explore (PyPI)
7 compromised versions
- Jan 28, 2026
Malicious code in pytorch-mutex (PyPI)
6 compromised versions
- Jan 28, 2026
Malicious code in tabullates (PyPI)
4 compromised versions
- Jan 27, 2026
Malicious code in tabletas (PyPI)
3 compromised versions
- Jan 27, 2026
Malicious code in solhint-plugin-hyperlane (PyPI)
1 compromised version
- Jan 26, 2026
Malicious code in radishwxm5 (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in selenium-integration (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in flask-hookserver (PyPI)
2 compromised versions
- Jan 25, 2026
Malicious code in researchpoc (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in system-integration-toxi (PyPI)
7 compromised versions
- Jan 25, 2026
Malicious code in test-poc-package-for-session (PyPI)
1 compromised version
Page 269 of 479