Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Nov 2, 2025
Malicious code in hexdecimal (PyPI)
1 compromised version
- Oct 31, 2025
Malicious code in pygments-richstyle (PyPI)
1 compromised version
- Oct 31, 2025
Malicious code in richx (PyPI)
4 compromised versions
- Oct 31, 2025
Malicious code in speed-testing-nt (PyPI)
1 compromised version
- Oct 29, 2025
Malicious code in kingwork-test (PyPI)
1 compromised version
- Oct 29, 2025
Malicious code in install-all-setup (PyPI)
2 compromised versions
- Oct 28, 2025
Malicious code in speedd-testing-bot (PyPI)
1 compromised version
- Oct 27, 2025
Malicious code in aiohappyeyeball (PyPI)
1 compromised version
- Oct 27, 2025
Malicious code in httpserver-cache (PyPI)
2 compromised versions
- Oct 26, 2025
Malicious code in donotinstall (PyPI)
2 compromised versions
- Oct 26, 2025
Malicious code in syschecker (PyPI)
1 compromised version
- Oct 26, 2025
Malicious code in windowsrequir (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in hexdecli (PyPI)
2 compromised versions
- Oct 25, 2025
Malicious code in benign-lib (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in python3-autopep8 (PyPI)
1 compromised version
- Oct 25, 2025
Malicious code in statsapi (PyPI)
2 compromised versions
- Oct 25, 2025
Malicious code in ethaddrlib (PyPI)
2 compromised versions
- Oct 24, 2025
Malicious code in hexdecpy (PyPI)
2 compromised versions
- Oct 24, 2025
Malicious code in aiohttp-openssl (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in web3eth (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in trstk (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in testpackageclaim (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in testpackage-hello (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in test422 (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in test421 (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in request-unitest (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in my-test-packagexx (PyPI)
1 compromised version
- Oct 23, 2025
Malicious code in image2hex (PyPI)
8 compromised versions
- Oct 23, 2025
Malicious code in aiohttp-ssl (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in smart-scheduler (PyPI)
5 compromised versions
- Oct 22, 2025
Malicious code in requests-os (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in lbank-connector-pythons (PyPI)
4 compromised versions
- Oct 22, 2025
Malicious code in asynhttp (PyPI)
1 compromised version
- Oct 22, 2025
Malicious code in libtasnl (PyPI)
1 compromised version
- Oct 21, 2025
Malicious code in installyoura (PyPI)
1 compromised version
- Oct 20, 2025
Malicious code in pytelegramapi (PyPI)
4 compromised versions
- Oct 20, 2025
Malicious code in yelp-pkg (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in huzzleuo130 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in cheezokdi10 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunculous5910 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in rando0192490 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in humunculous59101 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunaiodio2443 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in unclesky5910 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in humunculous591014 (PyPI)
2 compromised versions
- Oct 19, 2025
Malicious code in humunculous5910145 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in kirux189894 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in klsosdoids2 (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in huzzleup (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in klsosdoids5 (PyPI)
1 compromised version
Page 29 of 233