Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 25, 2025
Malicious code in prof-qu (PyPI)
2 compromised versions
- Jul 25, 2025
Malicious code in prof-tgqu (PyPI)
1 compromised version
- Jul 25, 2025
Malicious code in prof-quotex (PyPI)
4 compromised versions
- Jul 24, 2025
Malicious code in m5tlprovetomegz (PyPI)
2 compromised versions
- Jul 24, 2025
Malicious code in req-ase (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in testpackageroietest4 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in donotinstallthisistest5 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in donotinstallthisistest6 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in set7 (PyPI)
6 compromised versions
- Jul 20, 2025
Malicious code in ruamel-poc (PyPI)
2 compromised versions
- Jul 19, 2025
Malicious code in hahabott (PyPI)
7 compromised versions
- Jul 19, 2025
Malicious code in aphorism-lib (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in lazmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hkmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hekamhelp (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in talbat (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in rbx1325382 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in rbx1325 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in blabutt (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in groq-mcp (PyPI)
2 compromised versions
- Jul 18, 2025
Malicious code in svcmanager (PyPI)
1 compromised version
- Jul 17, 2025
Malicious code in avatar-handler (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in memorylib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in memtools (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in vramx (PyPI)
2 compromised versions
- Jul 16, 2025
Malicious code in memlib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in logghelper (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in testcatplzignore (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in python-uvicorn (PyPI)
4 compromised versions
- Jul 16, 2025
Malicious code in iscc-flag (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku1-rce (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku2-rce (PyPI)
2 compromised versions
- Jul 15, 2025
Malicious code in crto0 (PyPI)
1 compromised version
- Jul 14, 2025
Malicious code in vtk-osmesa (PyPI)
16 compromised versions
- Jul 14, 2025
Malicious code in paradox-pydevdeps (PyPI)
1 compromised version
- Jul 14, 2025
Malicious code in crto5 (PyPI)
3 compromised versions
- Jul 14, 2025
Malicious code in cas-base (PyPI)
15 compromised versions
- Jul 14, 2025
Malicious code in gateway-framework (PyPI)
3 compromised versions
- Jul 14, 2025
Malicious code in dbnodeindicator (PyPI)
2 compromised versions
- Jul 14, 2025
Malicious code in httppack (PyPI)
2 compromised versions
- Jul 13, 2025
Malicious code in package-346234294 (PyPI)
3 compromised versions
- Jul 13, 2025
Malicious code in crpt1 (PyPI)
5 compromised versions
- Jul 12, 2025
Malicious code in crpt (PyPI)
1 compromised version
- Jul 12, 2025
Malicious code in test-package-avinav (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in gramapi (PyPI)
3 compromised versions
- Jul 11, 2025
Malicious code in puregram (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in tronpyapi (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in seclab-research-depconf-test (PyPI)
2 compromised versions
- Jul 11, 2025
Malicious code in dbindicator (PyPI)
2 compromised versions
- Jul 11, 2025
Malicious code in node-db-indicator (PyPI)
1 compromised version
Page 285 of 479