Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Dec 1, 2025
Malicious code in python-doenv (PyPI)
7 compromised versions
- Dec 1, 2025
Malicious code in starexx (PyPI)
3 compromised versions
- Dec 1, 2025
Malicious code in rsa2026 (PyPI)
1 compromised version
- Dec 1, 2025
Malicious code in realstarexx (PyPI)
2 compromised versions
- Dec 1, 2025
Malicious code in imad213insta (PyPI)
2 compromised versions
- Dec 1, 2025
Malicious code in hexdeclink (PyPI)
1 compromised version
- Nov 30, 2025
Malicious code in multithreadedexecution (PyPI)
1 compromised version
- Nov 30, 2025
Malicious code in chat-prompt-logger (PyPI)
11 compromised versions
- Nov 29, 2025
Malicious code in logguru (PyPI)
6 compromised versions
- Nov 27, 2025
Malicious code in discord-selfsbotsx (PyPI)
2 compromised versions
- Nov 27, 2025
Malicious code in threading-helper (PyPI)
1 compromised version
- Nov 27, 2025
Malicious code in dev-server-python (PyPI)
1 compromised version
- Nov 27, 2025
Malicious code in gptall (PyPI)
1 compromised version
- Nov 26, 2025
Malicious code in discordhelper-ecr (PyPI)
1 compromised version
- Nov 26, 2025
Malicious code in rtcplogin (PyPI)
1 compromised version
- Nov 26, 2025
Malicious code in tablates (PyPI)
2 compromised versions
- Nov 26, 2025
Malicious code in hooktest2 (PyPI)
1 compromised version
- Nov 26, 2025
Malicious code in atlassian-praz (PyPI)
1 compromised version
- Nov 26, 2025
Malicious code in atlassian-exp (PyPI)
1 compromised version
- Nov 25, 2025
Malicious code in rtcpstream (PyPI)
1 compromised version
- Nov 25, 2025
Malicious code in hexcon (PyPI)
1 compromised version
- Nov 25, 2025
Malicious code in tableate (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in pyrtp (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in rtcpy (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in aounitaounit2 (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in chicopute (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in aiostreams (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in jsonschemex (PyPI)
6 compromised versions
- Nov 24, 2025
Malicious code in evil-py-argo-shell (PyPI)
3 compromised versions
- Nov 24, 2025
Malicious code in mongland (PyPI)
1 compromised version
- Nov 24, 2025
Malicious code in zakuchienne (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in mescouilles (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in testingpkgja (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in hooktest1 (PyPI)
2 compromised versions
- Nov 23, 2025
Malicious code in speed-testing-vps (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in minizip (PyPI)
2 compromised versions
- Nov 23, 2025
Malicious code in hexdecnet (PyPI)
1 compromised version
- Nov 22, 2025
Malicious code in uuzip (PyPI)
4 compromised versions
- Nov 22, 2025
Malicious code in mzip (PyPI)
1 compromised version
- Nov 22, 2025
Malicious code in uzip (PyPI)
2 compromised versions
- Nov 22, 2025
Malicious code in aiogram-msgeffect (PyPI)
2 compromised versions
- Nov 22, 2025
Malicious code in nspacercesolve (PyPI)
7 compromised versions
- Nov 22, 2025
Malicious code in tgeffect (PyPI)
9 compromised versions
- Nov 21, 2025
Malicious code in voicemetterr (PyPI)
6 compromised versions
- Nov 20, 2025
Malicious code in kdewebhelper (PyPI)
2 compromised versions
- Nov 20, 2025
Malicious code in peptest2 (PyPI)
2 compromised versions
- Nov 20, 2025
Malicious code in peptest (PyPI)
3 compromised versions
- Nov 20, 2025
Malicious code in siitoogether (PyPI)
5 compromised versions
- Nov 19, 2025
Malicious code in sitoogether (PyPI)
4 compromised versions
- Nov 18, 2025
Malicious code in aws-enumerateiam (PyPI)
3 compromised versions
Page 273 of 479