Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Oct 20, 2026
Malicious code in semvver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semveer (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semmver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semverr (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in security-research-startup-snapshot-810764b303 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in research-probe-6150c1c915 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workcalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in test-workalendar-internal (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in pafex (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in resion (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in pafex (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in resion (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workcalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in test-workalendar-internal (PyPI)
3 compromised versions
- Oct 20, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabdeploycheck (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabtoolkit (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabdeploycheck (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabtoolkit (PyPI)
4 compromised versions
- Oct 18, 2026
Malicious code in leakdeep (PyPI)
1 compromised version
- Oct 18, 2026
Malicious code in leakdeep (PyPI)
9 compromised versions
- Oct 17, 2026
Malicious code in pyrechoasr (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in voltswannts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in ukraine69 (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in quasitonnts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in tonemaptts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in novalithtts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in emberlytts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in driftwavets (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in glassbeakasr (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in tonemaptts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in pyrechoasr (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in driftwavets (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in novalithtts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in voltswannts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in glassbeakasr (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in emberlytts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in quasitonnts (PyPI)
1 compromised version
- Oct 17, 2026
Malicious code in ukraine69 (PyPI)
8 compromised versions
- Oct 16, 2026
Malicious code in pyyi (PyPI)
9 compromised versions
- Oct 16, 2026
Malicious code in marocolor (PyPI)
1 compromised version
- Oct 16, 2026
Malicious code in marocolor (PyPI)
1 compromised version
- Oct 16, 2026
Malicious code in fromthehotel-poems (PyPI)
1 compromised version
- Oct 16, 2026
Malicious code in fromthehotel-poems (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in proxyrobika (PyPI)
1 compromised version
Page 5 of 479