Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 31, 2025
Malicious code in torrent-tracker-scraper (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in torchao-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in thoughtspot-rest-api-sdk (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in terraform-binary-wheel (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in support-developer (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in spokeoapi (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in spl-transpiler (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparsify-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparsezoo-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparseml-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in solidity-coverage (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sodha (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in saga-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in runway-python (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in research-learn (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in repocket (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in reade (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in rctorchprivate (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in pyrofork-dev (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in polidoro-cli (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in plural (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in phishermanx (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in pb-common (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ouc-api (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in optext-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in oca-pylint-plugin (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in neptune-cli (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in napari-flowering-apple-tree-pixel-classification (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in nanamilang (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in mytoolsfun (PyPI)
2 compromised versions
- Jul 31, 2025
Malicious code in myfuntools (PyPI)
86 compromised versions
- Jul 31, 2025
Malicious code in moxel-python-driver (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in mb-commons (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in loggutils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in localstack-plugin-persistence (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in libfwupdplugin1 (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in leip (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in kwargs (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in karma-jasmine-sinon (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in jmdrs (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in hyperon-das-atomdb (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in graphlibx (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in graphex (PyPI)
4 compromised versions
- Jul 31, 2025
Malicious code in graphalgo (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in gcdt-bundler (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in flexiconf (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in filesystem-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in file-writer-control (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-triggers-module (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in fastybird-redisdb-exchange-plugin (PyPI)
1 compromised version
Page 283 of 479