Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Aug 2, 2025
Malicious code in req-pre-automate (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-pre-automate1 (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in loggerex (PyPI)
3 compromised versions
- Aug 1, 2025
Malicious code in supersafereverse (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in loquru (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-dooorto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in num2words (PyPI)
2 compromised versions
- Jul 31, 2025
num2words subjected to phishing attack, two versions published containing malware
- Jul 31, 2025
Malicious code in zlsrc (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in zlapp (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in zipf (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ziggonext (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in wallets-utils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in utils-wallet (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in tulipgui-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in torrent-tracker-scraper (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in torchao-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in thoughtspot-rest-api-sdk (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in terraform-binary-wheel (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in support-developer (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in spokeoapi (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in spl-transpiler (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparsify-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparsezoo-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sparseml-nightly (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in solidity-coverage (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in sodha (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in saga-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in runway-python (PyPI)
3 compromised versions
- Jul 31, 2025
Malicious code in research-learn (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in repocket (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in reade (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in rctorchprivate (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in pyrofork-dev (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in polidoro-cli (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in plural (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in phishermanx (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in pb-common (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in ouc-api (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in optext-python (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in oca-pylint-plugin (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in neptune-cli (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in napari-flowering-apple-tree-pixel-classification (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in nanamilang (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in mytoolsfun (PyPI)
2 compromised versions
- Jul 31, 2025
Malicious code in myfuntools (PyPI)
86 compromised versions
- Jul 31, 2025
Malicious code in moxel-python-driver (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in mb-commons (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in loggutils (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in localstack-plugin-persistence (PyPI)
1 compromised version
Page 37 of 233