Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Nov 18, 2025
Malicious code in requtils (PyPI)
3 compromised versions
- Nov 16, 2025
Malicious code in perfviewer (PyPI)
5 compromised versions
- Nov 15, 2025
Malicious code in spellcheckers (PyPI)
7 compromised versions
- Nov 15, 2025
Malicious code in hexadecpy (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in pam98wyfupa98w (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in d1n0-exploit-aaaa (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in minemeld-core (PyPI)
2 compromised versions
- Nov 14, 2025
Malicious code in d1n0exploitaaaa (PyPI)
2 compromised versions
- Nov 14, 2025
Malicious code in hexadec (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in xsltproc (PyPI)
2 compromised versions
- Nov 13, 2025
Malicious code in pylibcugraph (PyPI)
2 compromised versions
- Nov 13, 2025
Malicious code in quicksort-pro (PyPI)
6 compromised versions
- Nov 12, 2025
Malicious code in zakuraweb (PyPI)
1 compromised version
- Nov 12, 2025
Malicious code in morosint (PyPI)
1 compromised version
- Nov 12, 2025
Malicious code in python-rootpath (PyPI)
8 compromised versions
- Nov 12, 2025
Malicious code in google-cloud-iam-credentials (PyPI)
1 compromised version
- Nov 11, 2025
Malicious code in llmboost-hub (PyPI)
1 compromised version
- Nov 8, 2025
Malicious code in db-aggregator-api (PyPI)
2 compromised versions
- Nov 7, 2025
Malicious code in chromifypro (PyPI)
2 compromised versions
- Nov 7, 2025
Malicious code in wei516-ppa (PyPI)
2 compromised versions
- Nov 6, 2025
Malicious code in wei516-tpa (PyPI)
3 compromised versions
- Nov 6, 2025
Malicious code in mcp-weather-full (PyPI)
19 compromised versions
- Nov 6, 2025
Malicious code in wei516-enconly (PyPI)
9 compromised versions
- Nov 6, 2025
Malicious code in testpurpleteaming (PyPI)
3 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-tpa (PyPI)
4 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-ppa (PyPI)
2 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-enconly (PyPI)
4 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-weather (PyPI)
56 compromised versions
- Nov 3, 2025
Malicious code in faker-py123123thon (PyPI)
1 compromised version
- Nov 2, 2025
Malicious code in python-requirements-inspector (PyPI)
2 compromised versions
- Nov 2, 2025
Malicious code in faker-python (PyPI)
3 compromised versions
- Nov 2, 2025
Malicious code in krisp-audio (PyPI)
2 compromised versions
- Nov 2, 2025
Malicious code in hexdecimal (PyPI)
1 compromised version
- Oct 31, 2025
Malicious code in pygments-richstyle (PyPI)
1 compromised version
- Oct 31, 2025
Malicious code in richx (PyPI)
4 compromised versions
- Oct 31, 2025
Malicious code in speed-testing-nt (PyPI)
1 compromised version
- Oct 29, 2025
Malicious code in kingwork-test (PyPI)
1 compromised version
- Oct 29, 2025
Malicious code in install-all-setup (PyPI)
2 compromised versions
- Oct 28, 2025
Malicious code in speedd-testing-bot (PyPI)
1 compromised version
- Oct 27, 2025
Malicious code in aiohappyeyeball (PyPI)
1 compromised version
- Oct 27, 2025
Malicious code in httpserver-cache (PyPI)
2 compromised versions
- Oct 26, 2025
Malicious code in donotinstall (PyPI)
2 compromised versions
- Oct 26, 2025
Malicious code in syschecker (PyPI)
1 compromised version
- Oct 26, 2025
Malicious code in windowsrequir (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in hexdecli (PyPI)
2 compromised versions
- Oct 25, 2025
Malicious code in benign-lib (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in python3-autopep8 (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in statsapi (PyPI)
2 compromised versions
- Oct 25, 2025
Malicious code in ethaddrlib (PyPI)
2 compromised versions
- Oct 24, 2025
Malicious code in hexdecpy (PyPI)
2 compromised versions
Page 274 of 479