Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jan 25, 2026
Malicious code in test-poc-package-for-session-2 (PyPI)
1 compromised version
- Jan 25, 2026
Malicious code in system-integration (PyPI)
2 compromised versions
- Jan 24, 2026
Malicious code in instascan-pro (PyPI)
1 compromised version
- Jan 23, 2026
Malicious code in tableates (PyPI)
6 compromised versions
- Jan 23, 2026
Malicious code in tabletes (PyPI)
3 compromised versions
- Jan 22, 2026
Malicious code in urlsssser (PyPI)
1 compromised version
- Jan 22, 2026
Malicious code in cflashfiles (PyPI)
3 compromised versions
- Jan 22, 2026
Malicious code in urlsser (PyPI)
1 compromised version
- Jan 22, 2026
Malicious code in icloud-recovery (PyPI)
6 compromised versions
- Jan 22, 2026
Malicious code in sympy-dev (PyPI)
4 compromised versions
- Jan 22, 2026
Malicious code in icloudprocessor (PyPI)
6 compromised versions
- Jan 21, 2026
Malicious code in ttam-ploy (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in code-transfering-3 (PyPI)
1 compromised version
- Jan 21, 2026
Malicious code in code-transfering-4 (PyPI)
1 compromised version
- Jan 21, 2026
Malicious code in terminalbrush (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in 1q847 (PyPI)
24 compromised versions
- Jan 21, 2026
Malicious code in xadauiom (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in anduril-lattice-sdk-grpc-python (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in spellcheckpy (PyPI)
2 compromised versions
- Jan 21, 2026
Malicious code in coolpackage2323 (PyPI)
4 compromised versions
- Jan 20, 2026
Malicious code in spellcheckerpy (PyPI)
3 compromised versions
- Jan 19, 2026
Malicious code in medifile (PyPI)
1 compromised version
- Jan 19, 2026
Malicious code in nanoinstaller (PyPI)
1 compromised version
- Jan 19, 2026
Malicious code in bnanainstaller (PyPI)
1 compromised version
- Jan 18, 2026
Malicious code in urlssser (PyPI)
2 compromised versions
- Jan 18, 2026
Malicious code in marshel (PyPI)
1 compromised version
- Jan 16, 2026
Malicious code in uitil (PyPI)
2 compromised versions
- Jan 14, 2026
Malicious code in haqawi (PyPI)
1 compromised version
- Jan 14, 2026
Malicious code in legendevil1 (PyPI)
1 compromised version
- Jan 14, 2026
Malicious code in hairest (PyPI)
3 compromised versions
- Jan 14, 2026
Malicious code in clipcord (PyPI)
3 compromised versions
- Jan 14, 2026
Malicious code in solana-program (PyPI)
2 compromised versions
- Jan 14, 2026
Malicious code in soupclaw (PyPI)
8 compromised versions
- Jan 14, 2026
Malicious code in transitive-req (PyPI)
2 compromised versions
- Jan 13, 2026
Malicious code in dify-api (PyPI)
1 compromised version
- Jan 12, 2026
Malicious code in formater (PyPI)
2 compromised versions
- Jan 12, 2026
Malicious code in graponater (PyPI)
1 compromised version
- Jan 11, 2026
Malicious code in libc-dev (PyPI)
2 compromised versions
- Jan 10, 2026
Malicious code in oncecall (PyPI)
1 compromised version
- Jan 8, 2026
Malicious code in do-not-install-this-package-002 (PyPI)
2 compromised versions
- Jan 8, 2026
Malicious code in btcli-security (PyPI)
3 compromised versions
- Jan 7, 2026
Malicious code in lnatainstaller (PyPI)
1 compromised version
- Jan 7, 2026
Malicious code in codefrequencychecker (PyPI)
5 compromised versions
- Jan 6, 2026
Malicious code in py-publish-test-0126 (PyPI)
2 compromised versions
- Jan 6, 2026
Malicious code in testingpy (PyPI)
1 compromised version
- Jan 6, 2026
Malicious code in robustinfer (PyPI)
3 compromised versions
- Jan 6, 2026
Malicious code in pycolorom (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in auto-backup-linux (PyPI)
7 compromised versions
- Jan 5, 2026
Malicious code in auto-backup-macos (PyPI)
6 compromised versions
- Jan 5, 2026
Malicious code in auto-backup-wsl (PyPI)
8 compromised versions
Page 270 of 479