Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Oct 19, 2025
Malicious code in abhamzufu (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in ga3fario (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in ga3farifo (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in hamubika (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in hamurico (PyPI)
1 compromised version
- Oct 19, 2025
Malicious code in rizco09 (PyPI)
1 compromised version
- Oct 17, 2025
Malicious code in ptxcompiler (PyPI)
2 compromised versions
- Oct 17, 2025
Malicious code in poc-suppentest (PyPI)
1 compromised version
- Oct 17, 2025
Malicious code in egarcia-poc (PyPI)
1 compromised version
- Oct 16, 2025
Malicious code in makronlox (PyPI)
2 compromised versions
- Oct 16, 2025
Malicious code in musl-dev (PyPI)
2 compromised versions
- Oct 15, 2025
Malicious code in saintone (PyPI)
3 compromised versions
- Oct 15, 2025
Malicious code in md5-en (PyPI)
2 compromised versions
- Oct 14, 2025
Malicious code in tosa-serialization-lib (PyPI)
2 compromised versions
- Oct 13, 2025
Malicious code in mcp-runcmd-server (PyPI)
2 compromised versions
- Oct 10, 2025
Malicious code in hexdec (PyPI)
1 compromised version
- Oct 10, 2025
Malicious code in python3-6 (PyPI)
3 compromised versions
- Oct 10, 2025
Malicious code in mcp-runcommand-server2 (PyPI)
1 compromised version
- Oct 10, 2025
Malicious code in mcp-runcommand-server (PyPI)
8 compromised versions
- Oct 8, 2025
Malicious code in anothertestproject (PyPI)
8 compromised versions
- Oct 6, 2025
Malicious code in gnosis-py (PyPI)
2 compromised versions
- Oct 3, 2025
Malicious code in d1snakegame (PyPI)
4 compromised versions
- Oct 2, 2025
Malicious code in emoted (PyPI)
1 compromised version
- Oct 1, 2025
Malicious code in tikweb (PyPI)
2 compromised versions
- Oct 1, 2025
Malicious code in gradio-videotimeline (PyPI)
2 compromised versions
- Oct 1, 2025
Malicious code in regixtest (PyPI)
5 compromised versions
- Sep 30, 2025
Malicious code in bioql (PyPI)
26 compromised versions
- Sep 28, 2025
Malicious code in propeller-solver-core (PyPI)
1 compromised version
- Sep 27, 2025
Malicious code in tronlastpy (PyPI)
1 compromised version
- Sep 26, 2025
Malicious code in tronlast (PyPI)
1 compromised version
- Sep 26, 2025
Malicious code in matplotliv (PyPI)
1 compromised version
- Sep 26, 2025
Malicious code in soopsocks (PyPI)
12 compromised versions
- Sep 26, 2025
Malicious code in netkit-lite (PyPI)
10 compromised versions
- Sep 26, 2025
Malicious code in worldnex (PyPI)
9 compromised versions
- Sep 26, 2025
Malicious code in ipfind-microtip (PyPI)
2 compromised versions
- Sep 26, 2025
Malicious code in eenomenallib (PyPI)
1 compromised version
- Sep 26, 2025
Malicious code in discordext (PyPI)
3 compromised versions
- Sep 26, 2025
Malicious code in btcli (PyPI)
5 compromised versions
- Sep 26, 2025
Malicious code in bitensor-cli (PyPI)
1 compromised version
- Sep 26, 2025
Malicious code in bloxypy (PyPI)
1 compromised version
- Sep 24, 2025
Malicious code in tronhexpy (PyPI)
1 compromised version
- Sep 22, 2025
Malicious code in final-osint (PyPI)
1 compromised version
- Sep 22, 2025
Malicious code in vielcord (PyPI)
1 compromised version
- Sep 21, 2025
Malicious code in cugraph-service-server (PyPI)
2 compromised versions
- Sep 21, 2025
Malicious code in tronhex (PyPI)
1 compromised version
- Sep 20, 2025
Malicious code in readosso (PyPI)
3 compromised versions
- Sep 19, 2025
Malicious code in yuzo (PyPI)
4 compromised versions
- Sep 19, 2025
Malicious code in suyo (PyPI)
13 compromised versions
- Sep 18, 2025
Malicious code in termncolor (PyPI)
1 compromised version
- Sep 18, 2025
Malicious code in colorinal (PyPI)
1 compromised version
Page 30 of 233