Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Dec 22, 2025
Malicious code in smtrlib (PyPI)
2 compromised versions
- Dec 22, 2025
Malicious code in unizip (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in hooktest-fin (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in runtimeutils (PyPI)
3 compromised versions
- Dec 21, 2025
Malicious code in colorfulpacket (PyPI)
1 compromised version
- Dec 21, 2025
Malicious code in ai-cypher (PyPI)
2 compromised versions
- Dec 19, 2025
Malicious code in system-health-check-test-unique (PyPI)
13 compromised versions
- Dec 19, 2025
Malicious code in connections-api-hidden-runner (PyPI)
2 compromised versions
- Dec 19, 2025
Malicious code in hidden-powershell-runner-ax7 (PyPI)
2 compromised versions
- Dec 18, 2025
Malicious code in f5rest (PyPI)
1 compromised version
- Dec 18, 2025
Malicious code in f5-logger (PyPI)
1 compromised version
- Dec 18, 2025
Malicious code in bigip (PyPI)
1 compromised version
- Dec 17, 2025
Malicious code in trondec (PyPI)
1 compromised version
- Dec 15, 2025
Malicious code in smtblib (PyPI)
2 compromised versions
- Dec 11, 2025
Malicious code in yzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in gxzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in netbenchkit (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in synium (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in jsonschema-utf8 (PyPI)
3 compromised versions
- Dec 10, 2025
Malicious code in loguru-utf8 (PyPI)
2 compromised versions
- Dec 10, 2025
Malicious code in ctosec-appsec-wb-xray-adapters (PyPI)
6 compromised versions
- Dec 10, 2025
Malicious code in kzip (PyPI)
1 compromised version
- Dec 10, 2025
Malicious code in bigpyx (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in helloharry123c (PyPI)
1 compromised version
- Dec 9, 2025
Malicious code in ctosec-appsec-wb-xray-adapter (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in ajenti-plugin-testing-pyld (PyPI)
3 compromised versions
- Dec 9, 2025
Malicious code in bignum (PyPI)
4 compromised versions
- Dec 9, 2025
Malicious code in do-not-install-this-package-001 (PyPI)
4 compromised versions
- Dec 9, 2025
Malicious code in telcoo (PyPI)
3 compromised versions
- Dec 9, 2025
Malicious code in graphsync (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in raft-dask (PyPI)
2 compromised versions
- Dec 9, 2025
Malicious code in sketchfab-spinner (PyPI)
3 compromised versions
- Dec 8, 2025
Malicious code in helloharry123p (PyPI)
2 compromised versions
- Dec 8, 2025
Malicious code in graphnode (PyPI)
3 compromised versions
- Dec 7, 2025
Malicious code in hexdeci (PyPI)
1 compromised version
- Dec 7, 2025
Malicious code in python-tg-bot (PyPI)
2 compromised versions
- Dec 7, 2025
Malicious code in blank-lib (PyPI)
3 compromised versions
- Dec 6, 2025
Malicious code in evil-rce2 (PyPI)
1 compromised version
- Dec 6, 2025
Malicious code in telco (PyPI)
2 compromised versions
- Dec 6, 2025
Malicious code in evil-rce (PyPI)
1 compromised version
- Dec 5, 2025
Malicious code in qt-main (PyPI)
2 compromised versions
- Dec 5, 2025
Malicious code in rendom (PyPI)
1 compromised version
- Dec 5, 2025
Malicious code in joyboyw (PyPI)
2 compromised versions
- Dec 4, 2025
Malicious code in dell-recovery (PyPI)
1 compromised version
- Dec 4, 2025
Malicious code in dell-restore-system (PyPI)
1 compromised version
- Dec 4, 2025
Malicious code in coremsft (PyPI)
2 compromised versions
- Dec 3, 2025
Malicious code in hellospa (PyPI)
1 compromised version
- Dec 2, 2025
Malicious code in pulsecord (PyPI)
1 compromised version
- Dec 2, 2025
Malicious code in gtkfuscator (PyPI)
1 compromised version
- Dec 2, 2025
Malicious code in hooktest3 (PyPI)
1 compromised version
Page 272 of 479