Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Nov 23, 2025
Malicious code in testingpkgja (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in hooktest1 (PyPI)
2 compromised versions
- Nov 23, 2025
Malicious code in speed-testing-vps (PyPI)
1 compromised version
- Nov 23, 2025
Malicious code in minizip (PyPI)
2 compromised versions
- Nov 23, 2025
Malicious code in hexdecnet (PyPI)
1 compromised version
- Nov 22, 2025
Malicious code in uuzip (PyPI)
4 compromised versions
- Nov 22, 2025
Malicious code in mzip (PyPI)
1 compromised version
- Nov 22, 2025
Malicious code in uzip (PyPI)
2 compromised versions
- Nov 22, 2025
Malicious code in aiogram-msgeffect (PyPI)
2 compromised versions
- Nov 22, 2025
Malicious code in nspacercesolve (PyPI)
7 compromised versions
- Nov 22, 2025
Malicious code in tgeffect (PyPI)
9 compromised versions
- Nov 21, 2025
Malicious code in voicemetterr (PyPI)
6 compromised versions
- Nov 20, 2025
Malicious code in kdewebhelper (PyPI)
2 compromised versions
- Nov 20, 2025
Malicious code in peptest2 (PyPI)
2 compromised versions
- Nov 20, 2025
Malicious code in peptest (PyPI)
3 compromised versions
- Nov 20, 2025
Malicious code in siitoogether (PyPI)
5 compromised versions
- Nov 19, 2025
Malicious code in sitoogether (PyPI)
4 compromised versions
- Nov 18, 2025
Malicious code in aws-enumerateiam (PyPI)
3 compromised versions
- Nov 18, 2025
Malicious code in requtils (PyPI)
3 compromised versions
- Nov 16, 2025
Malicious code in perfviewer (PyPI)
5 compromised versions
- Nov 15, 2025
Malicious code in spellcheckers (PyPI)
7 compromised versions
- Nov 15, 2025
Malicious code in hexadecpy (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in pam98wyfupa98w (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in d1n0-exploit-aaaa (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in minemeld-core (PyPI)
2 compromised versions
- Nov 14, 2025
Malicious code in d1n0exploitaaaa (PyPI)
2 compromised versions
- Nov 14, 2025
Malicious code in hexadec (PyPI)
1 compromised version
- Nov 14, 2025
Malicious code in xsltproc (PyPI)
2 compromised versions
- Nov 13, 2025
Malicious code in pylibcugraph (PyPI)
2 compromised versions
- Nov 13, 2025
Malicious code in quicksort-pro (PyPI)
6 compromised versions
- Nov 12, 2025
Malicious code in zakuraweb (PyPI)
1 compromised version
- Nov 12, 2025
Malicious code in morosint (PyPI)
1 compromised version
- Nov 12, 2025
Malicious code in python-rootpath (PyPI)
8 compromised versions
- Nov 12, 2025
Malicious code in google-cloud-iam-credentials (PyPI)
1 compromised version
- Nov 11, 2025
Malicious code in llmboost-hub (PyPI)
1 compromised version
- Nov 8, 2025
Malicious code in db-aggregator-api (PyPI)
2 compromised versions
- Nov 7, 2025
Malicious code in chromifypro (PyPI)
2 compromised versions
- Nov 7, 2025
Malicious code in wei516-ppa (PyPI)
2 compromised versions
- Nov 6, 2025
Malicious code in wei516-tpa (PyPI)
3 compromised versions
- Nov 6, 2025
Malicious code in mcp-weather-full (PyPI)
19 compromised versions
- Nov 6, 2025
Malicious code in wei516-enconly (PyPI)
9 compromised versions
- Nov 6, 2025
Malicious code in testpurpleteaming (PyPI)
3 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-tpa (PyPI)
4 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-ppa (PyPI)
2 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-enconly (PyPI)
4 compromised versions
- Nov 5, 2025
Malicious code in wayspiritmcp-weather (PyPI)
56 compromised versions
- Nov 3, 2025
Malicious code in faker-py123123thon (PyPI)
1 compromised version
- Nov 2, 2025
Malicious code in python-requirements-inspector (PyPI)
2 compromised versions
- Nov 2, 2025
Malicious code in faker-python (PyPI)
3 compromised versions
- Nov 2, 2025
Malicious code in krisp-audio (PyPI)
2 compromised versions
Page 28 of 233