Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Oct 24, 2025
Malicious code in aiohttp-openssl (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in web3eth (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in trstk (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in testpackageclaim (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in testpackage-hello (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in test422 (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in test421 (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in request-unitest (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in my-test-packagexx (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in image2hex (PyPI)
8 compromised versions
- Oct 23, 2025
Malicious code in aiohttp-ssl (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in smart-scheduler (PyPI)
5 compromised versions
- Oct 22, 2025
Malicious code in requests-os (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in lbank-connector-pythons (PyPI)
4 compromised versions
- Oct 22, 2025
Malicious code in asynhttp (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in libtasnl (PyPI)
1 compromised version
- Oct 21, 2025
Malicious code in installyoura (PyPI)
1 compromised version
- Oct 20, 2025
Malicious code in pytelegramapi (PyPI)
4 compromised versions
- Oct 20, 2025
Malicious code in yelp-pkg (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in huzzleuo130 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in cheezokdi10 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunculous5910 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in rando0192490 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in humunculous59101 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunaiodio2443 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in unclesky5910 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunculous591014 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in humunculous5910145 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in kirux189894 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in klsosdoids2 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in huzzleup (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in klsosdoids5 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in abhamzufu (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in ga3fario (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in ga3farifo (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in hamubika (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in hamurico (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in rizco09 (PyPI)
1 compromised version
- Oct 17, 2025
Malicious code in ptxcompiler (PyPI)
2 compromised versions
- Oct 17, 2025
Malicious code in poc-suppentest (PyPI)
1 compromised version
- Oct 17, 2025
Malicious code in egarcia-poc (PyPI)
1 compromised version
- Oct 16, 2025
Malicious code in makronlox (PyPI)
2 compromised versions
- Oct 16, 2025
Malicious code in musl-dev (PyPI)
2 compromised versions
- Oct 15, 2025
Malicious code in saintone (PyPI)
3 compromised versions
- Oct 15, 2025
Malicious code in md5-en (PyPI)
2 compromised versions
- Oct 14, 2025
Malicious code in tosa-serialization-lib (PyPI)
2 compromised versions
- Oct 13, 2025
Malicious code in mcp-runcmd-server (PyPI)
2 compromised versions
- Oct 10, 2025
Malicious code in hexdec (PyPI)
1 compromised version
- Oct 10, 2025
Malicious code in python3-6 (PyPI)
3 compromised versions
- Oct 10, 2025
Malicious code in mcp-runcommand-server2 (PyPI)
1 compromised version
Page 275 of 479