Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jul 8, 2026
Malicious code in oxntime (PyPI)
4 compromised versions
- Jul 8, 2026
Malicious code in tronhapy (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in jsonschemavalid (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in tronhap (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in pyqt6darktheme (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in waymo-waymax (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in tiktoken-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in ray-mcp-server (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in orchestr8-platform (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in openai-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in langchain-core-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in instructor-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in dreamgen (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in jsonschemavalidation (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-sdk (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-payments (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-kyc (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in paysafe-api (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in scanvia (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in scan-checker (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in quatre (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-install-execution (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pycryptoshuffle (PyPI)
6 compromised versions
- Jul 7, 2026
Malicious code in piirgg (PyPI)
4 compromised versions
- Jul 7, 2026
Malicious code in notrandompacketname (PyPI)
3 compromised versions
- Jul 7, 2026
Malicious code in myproject234 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-payments (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-logging (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-auth (PyPI)
1 compromised version
- Jul 4, 2026
Malicious code in urlllib321 (PyPI)
2 compromised versions
- Jul 4, 2026
Malicious code in httpprobe (PyPI)
1 compromised version
- Jul 4, 2026
Malicious code in yt-api-dlp (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in bytekit (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in schemavault (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in confighub (PyPI)
2 compromised versions
- Jul 3, 2026
Malicious code in procwire (PyPI)
4 compromised versions
- Jul 3, 2026
Malicious code in ipa-user-collector (PyPI)
1 compromised version
- Jul 3, 2026
Malicious code in haproxy-config-client (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in horde-python-client (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in epic-build-scripts (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in ue-python-tools (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in unreal-mladapter (PyPI)
1 compromised version
- Jul 2, 2026
Malicious code in dt-validator (PyPI)
1 compromised version
- Jul 1, 2026
Malicious code in uprobe (PyPI)
2 compromised versions
Page 3 of 233