Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jul 1, 2026
Malicious code in ufish (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in synago (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in pantheon-toolsets (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in pantheon-agents (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in starlette-healthcheck (PyPI)
3 compromised versions
- Jul 1, 2026
Malicious code in okite (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in twrap-tool (PyPI)
1 compromised version
- Jul 1, 2026
Malicious code in nucbox (PyPI)
2 compromised versions
- Jul 1, 2026
Malicious code in napari-ufish (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in mrbios (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in magique-ai (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in magique (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in funcdesc (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in executor-http (PyPI)
2 compromised versions
- Jun 30, 2026
Malicious code in executor-engine (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in coolbox (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in cmd2func (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in bramin (PyPI)
3 compromised versions
- Jun 29, 2026
Malicious code in tlask (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in rlask (PyPI)
5 compromised versions
- Jun 29, 2026
Malicious code in nhmpy (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
- Jun 29, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jun 29, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jun 29, 2026
Malicious code in django-bkvision (PyPI)
1 compromised version
- Jun 28, 2026
Malicious code in skillspector (PyPI)
8 compromised versions
- Jun 28, 2026
Malicious code in tdata-grabber (PyPI)
1 compromised version
- Jun 28, 2026
Malicious code in fsociety-tools (PyPI)
3 compromised versions
- Jun 28, 2026
Malicious code in pkg-fallback (PyPI)
1 compromised version
- Jun 27, 2026
Malicious code in discord-token-generator (PyPI)
4 compromised versions
- Jun 26, 2026
Malicious code in pdf-converter-pro (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in pyphetools (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in ppkt2synergy (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in phenopacket-store-toolkit (PyPI)
1 compromised version
- Jun 26, 2026
Malicious code in inlifegram (PyPI)
2 compromised versions
- Jun 26, 2026
Malicious code in sqligen (PyPI)
8 compromised versions
- Jun 26, 2026
Malicious code in openblox (PyPI)
2 compromised versions
- Jun 25, 2026
Malicious code in extra-huggingface (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in pyext6cc8cd (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in mi-test-99-tuapellido (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in gpsea (PyPI)
1 compromised version
- Jun 25, 2026
Malicious code in embiggen (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in python-dateutil2 (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in ensmallen (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in gunicorm (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in ditenv (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in fkaks (PyPI)
1 compromised version
- Jun 24, 2026
Malicious code in mcpsever (PyPI)
1 compromised version
- Jun 23, 2026
Malicious code in security-alerts-sdk (PyPI)
4 compromised versions
- Jun 23, 2026
Malicious code in toorc (PyPI)
1 compromised version
Page 4 of 233