Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,629 total in pypi · sorted newest first- Jul 30, 2025
Malicious code in maxload (PyPI)
3 compromised versions
- Jul 29, 2025
Malicious code in someeebbb (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in triple-equal (PyPI)
1 compromised version
- Jul 29, 2025
Malicious code in testing123kk (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest3 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in testpackageroietest2 (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in greater-than (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in requires-python (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in supersafecalc (PyPI)
3 compromised versions
- Jul 28, 2025
Malicious code in treeherder-submitter (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in triple-equals (PyPI)
2 compromised versions
- Jul 27, 2025
Malicious code in hello-from-shiphero (PyPI)
1 compromised version
- Jul 26, 2025
Malicious code in prof-qux (PyPI)
4 compromised versions
- Jul 26, 2025
Malicious code in foundry-jupyter-extension (PyPI)
5 compromised versions
- Jul 25, 2025
Malicious code in prof-qx (PyPI)
5 compromised versions
- Jul 25, 2025
Malicious code in prof-qu (PyPI)
2 compromised versions
- Jul 25, 2025
Malicious code in prof-tgqu (PyPI)
1 compromised version
- Jul 25, 2025
Malicious code in prof-quotex (PyPI)
4 compromised versions
- Jul 24, 2025
Malicious code in m5tlprovetomegz (PyPI)
2 compromised versions
- Jul 24, 2025
Malicious code in req-ase (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in testpackageroietest4 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in donotinstallthisistest5 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in donotinstallthisistest6 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in set7 (PyPI)
6 compromised versions
- Jul 20, 2025
Malicious code in ruamel-poc (PyPI)
2 compromised versions
- Jul 19, 2025
Malicious code in hahabott (PyPI)
7 compromised versions
- Jul 19, 2025
Malicious code in aphorism-lib (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in lazmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hkmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hekamhelp (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in talbat (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in rbx1325382 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in rbx1325 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in blabutt (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in groq-mcp (PyPI)
2 compromised versions
- Jul 18, 2025
Malicious code in svcmanager (PyPI)
1 compromised version
- Jul 17, 2025
Malicious code in avatar-handler (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in memorylib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in memtools (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in vramx (PyPI)
2 compromised versions
- Jul 16, 2025
Malicious code in memlib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in logghelper (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in testcatplzignore (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in python-uvicorn (PyPI)
4 compromised versions
- Jul 16, 2025
Malicious code in iscc-flag (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku1-rce (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku2-rce (PyPI)
2 compromised versions
- Jul 15, 2025
Malicious code in crto0 (PyPI)
1 compromised version
- Jul 14, 2025
Malicious code in vtk-osmesa (PyPI)
16 compromised versions
- Jul 14, 2025
Malicious code in paradox-pydevdeps (PyPI)
1 compromised version
Page 39 of 233