Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jun 23, 2026
Malicious code in equest (PyPI)
1 compromised version
- Jun 23, 2026
Malicious code in ip-rotat (PyPI)
1 compromised version
- Jun 22, 2026
Malicious code in inversiones-common (PyPI)
2 compromised versions
- Jun 21, 2026
Malicious code in jsonschema-viewer (PyPI)
1 compromised version
- Jun 20, 2026
Malicious code in requests-enhancer (PyPI)
1 compromised version
- Jun 20, 2026
Malicious code in d0rk3r (PyPI)
16 compromised versions
- Jun 20, 2026
Malicious code in d0rk3r-telemetry (PyPI)
2 compromised versions
- Jun 20, 2026
Malicious code in request-cache-py (PyPI)
11 compromised versions
- Jun 20, 2026
Malicious code in query-profile (PyPI)
3 compromised versions
- Jun 20, 2026
Malicious code in fluent-dashboard-panel-metrics (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in improvado-layout-panel-metrics (PyPI)
2 compromised versions
- Jun 19, 2026
Malicious code in django-auth-middleware-plus (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fastercoding (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fastercode (PyPI)
3 compromised versions
- Jun 19, 2026
Malicious code in shoaib-done-pack (PyPI)
1 compromised version
- Jun 19, 2026
Malicious code in fluent-panel-metrics (PyPI)
1 compromised version
- Jun 18, 2026
Malicious code in randpicker (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in dotenv-sync (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in disksweep (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in syncagents (PyPI)
2 compromised versions
- Jun 17, 2026
Malicious code in boardflow (PyPI)
2 compromised versions
- Jun 17, 2026
Malicious code in pystylish (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in telegram-lite-grabber (PyPI)
1 compromised version
- Jun 17, 2026
Malicious code in tobihook (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in cache-compat-utils (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in temp-development-package-test (PyPI)
4 compromised versions
- Jun 16, 2026
Malicious code in myfirstpackagetestaaa (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in aaaazzzzaz (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in datacamp-light (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in testpackagemanyhttpsgo (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in twrap-toolkit (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in cipherflow (PyPI)
4 compromised versions
- Jun 15, 2026
Malicious code in intel-ai-safety-explainer (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in hello-test-s1 (PyPI)
3 compromised versions
- Jun 15, 2026
Malicious code in merino-common (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in node-scraper (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in dispatch-internal-plugins (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in llvm-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in gigl-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in databricks-tools-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mlir-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in intel-ai-safety (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in sl-pgp (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in kinto-slack (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mozautomation (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in scriptworker-client (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in pyptllm (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in testpgagent (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in neurodrift (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in llmfree (PyPI)
1 compromised version
Page 5 of 233