Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jan 5, 2026
Malicious code in auto-backup-wins (PyPI)
5 compromised versions
- Jan 5, 2026
Malicious code in lium-io-gztensor (PyPI)
3 compromised versions
- Jan 5, 2026
Malicious code in lium-4-96 (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in async-substrate-interface-upgrade (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in celium-collateral-upgrade (PyPI)
1 compromised version
- Jan 5, 2026
Malicious code in gztensor-cli (PyPI)
6 compromised versions
- Jan 5, 2026
Malicious code in pyrogrom (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aiihttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aoohttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in auohttp (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in aiohtto (PyPI)
1 compromised version
- Jan 4, 2026
Malicious code in blobhunter-depconf-poc (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in telstra (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in chrome-stealth (PyPI)
1 compromised version
- Jan 3, 2026
Malicious code in qdatainstaller (PyPI)
1 compromised version
- Jan 2, 2026
Malicious code in pdatainstaller (PyPI)
1 compromised version
- Jan 2, 2026
Malicious code in gatr (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in ziphash (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in queryservice-client (PyPI)
2 compromised versions
- Jan 1, 2026
Malicious code in sfnt2woff-zopfli (PyPI)
2 compromised versions
- Dec 31, 2025
Malicious code in requeses (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in pyrogrqm (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in telegreph (PyPI)
2 compromised versions
- Dec 31, 2025
Malicious code in aiogrem (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in accesspdp (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in brolool4141412 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in broooxddd1414 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in weorewfoi2393 (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in pyrogrem (PyPI)
1 compromised version
- Dec 31, 2025
Malicious code in umap (PyPI)
3 compromised versions
- Dec 30, 2025
Malicious code in rippling-cli (PyPI)
2 compromised versions
- Dec 29, 2025
Malicious code in awsutil (PyPI)
3 compromised versions
- Dec 29, 2025
Malicious code in smtmlib (PyPI)
2 compromised versions
- Dec 28, 2025
Malicious code in cryptozip (PyPI)
5 compromised versions
- Dec 28, 2025
Malicious code in aiogram-types-v3 (PyPI)
12 compromised versions
- Dec 27, 2025
Malicious code in extrazip (PyPI)
1 compromised version
- Dec 27, 2025
Malicious code in crypo (PyPI)
3 compromised versions
- Dec 27, 2025
Malicious code in crpto (PyPI)
3 compromised versions
- Dec 27, 2025
Malicious code in flaask (PyPI)
4 compromised versions
- Dec 26, 2025
Malicious code in telebot-bot (PyPI)
1 compromised version
- Dec 26, 2025
Malicious code in telegrem (PyPI)
1 compromised version
- Dec 26, 2025
Malicious code in aiogram-3 (PyPI)
2 compromised versions
- Dec 25, 2025
Malicious code in aiogram-sever-patch (PyPI)
5 compromised versions
- Dec 25, 2025
Malicious code in pxdbench (PyPI)
2 compromised versions
- Dec 24, 2025
Malicious code in envtoolsx (PyPI)
1 compromised version
- Dec 24, 2025
Malicious code in livekit-agents-hedra (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in lanchain-openai (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in fireeye-main (PyPI)
2 compromised versions
- Dec 23, 2025
Malicious code in fire-eye-bcs (PyPI)
3 compromised versions
- Dec 23, 2025
Malicious code in blastchamber-python-pypi (PyPI)
4 compromised versions
Page 271 of 479