Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jun 15, 2026
Malicious code in gptminifast (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in fastgptmini (PyPI)
6 compromised versions
- Jun 15, 2026
Malicious code in ckanext-dms (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in generatellm (PyPI)
3 compromised versions
- Jun 14, 2026
Malicious code in llamagenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in llmgenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in bash8 (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in ezllmgen (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in easyaillm2 (PyPI)
5 compromised versions
- Jun 14, 2026
Malicious code in easyllmai (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in easyaillm (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in anthropickit (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in salesforce-sysutils-diagnostics (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in dash-grid-normalizer (PyPI)
5 compromised versions
- Jun 12, 2026
Malicious code in textwrap-toolkit-stager (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in flexitest (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in nagios-xi (PyPI)
2 compromised versions
- Jun 12, 2026
Malicious code in jec (PyPI)
1 compromised version
- Jun 12, 2026
Malicious code in trongapy (PyPI)
1 compromised version
- Jun 11, 2026
Malicious code in trongap (PyPI)
1 compromised version
- Jun 11, 2026
Malicious code in bittensor-burn-message (PyPI)
1 compromised version
- Jun 11, 2026
Malicious code in pylogxo (PyPI)
2 compromised versions
- Jun 11, 2026
Malicious code in bibip-bip (PyPI)
1 compromised version
- Jun 11, 2026
Malicious code in acme-widget-layout-utils (PyPI)
3 compromised versions
- Jun 10, 2026
Malicious code in icinga (PyPI)
2 compromised versions
- Jun 10, 2026
Malicious code in telegramlite (PyPI)
2 compromised versions
- Jun 10, 2026
Malicious code in hello-dynamic (PyPI)
3 compromised versions
- Jun 10, 2026
Malicious code in requests-toolbelt-plus (PyPI)
4 compromised versions
- Jun 9, 2026
Malicious code in bittensor-emission-tracker (PyPI)
1 compromised version
- Jun 9, 2026
durabletask 1.4.1, 1.4.2, and 1.4.3 contain malicious code distributed via a compromised maintainer account
3 compromised versions
- Jun 9, 2026
Malicious code in tao-subnet-metrics (PyPI)
1 compromised version
- Jun 9, 2026
Malicious code in ultimate-ai-power (PyPI)
1 compromised version
- Jun 9, 2026
Malicious code in cubifyanything (PyPI)
3 compromised versions
- Jun 9, 2026
Malicious code in dstill (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in xfoofoox (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in solana-web3-py (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in solana-cli-py (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in solana-web3 (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in spl-token-py (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in xfoobar (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in spaysrbx (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in nerfstudio-gs (PyPI)
4 compromised versions
- Jun 8, 2026
Malicious code in bittensor-burn (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in xforpy (PyPI)
4 compromised versions
- Jun 8, 2026
Malicious code in odoo-addon-spp-base (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in bittensor-burn-alert (PyPI)
3 compromised versions
- Jun 8, 2026
Malicious code in spaysdatarbx (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in bt-burn-watch (PyPI)
1 compromised version
- Jun 8, 2026
Malicious code in bittensor-burn-monitor (PyPI)
7 compromised versions
- Jun 8, 2026
Malicious code in openai-mcp (PyPI)
2 compromised versions
Page 6 of 233