Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Oct 15, 2026
Malicious code in proxyrobika (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in proxyrubika (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in py-wormgpt (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in proxy-rubikis (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in getpubip (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in proxy-rubikis (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in py-wormgpt (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in proxyrubika (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in getpubip (PyPI)
3 compromised versions
- Oct 15, 2026
Malicious code in py-sock2 (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in py-worm (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in py-worm (PyPI)
3 compromised versions
- Oct 15, 2026
Malicious code in py-sock2 (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in seapy-ops (PyPI)
1 compromised version
- Oct 15, 2026
Malicious code in saeka (PyPI)
1 compromised version
- Oct 14, 2026
Malicious code in saeka (PyPI)
26 compromised versions
- Oct 14, 2026
Malicious code in seapy-ops (PyPI)
8 compromised versions
- Oct 14, 2026
Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)
1 compromised version
- Oct 14, 2026
Malicious code in pyyi (PyPI)
1 compromised version
- Oct 13, 2026
Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)
1 compromised version
- Oct 13, 2026
Malicious code in fontcase (PyPI)
1 compromised version
- Oct 13, 2026
Malicious code in sysdiagd (PyPI)
1 compromised version
- Oct 13, 2026
Malicious code in fontcase (PyPI)
3 compromised versions
- Oct 13, 2026
Malicious code in sysdiagd (PyPI)
3 compromised versions
- Oct 12, 2026
Malicious code in npp-ml (PyPI)
1 compromised version
- Oct 12, 2026
Malicious code in npp-ml (PyPI)
4 compromised versions
- Oct 12, 2026
Malicious code in minecraftaccfinder (PyPI)
1 compromised version
- Oct 12, 2026
Malicious code in minecraftaccfinder (PyPI)
8 compromised versions
- Oct 12, 2026
Malicious code in py2ops (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in agent-vx (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in webreader (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in pafer (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in agent-vx (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in pafer (PyPI)
2 compromised versions
- Oct 10, 2026
Malicious code in webreader (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in media-manager5 (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in agentaix (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in media-manager5 (PyPI)
1 compromised version
- Oct 10, 2026
Malicious code in agentaix (PyPI)
2 compromised versions
- Oct 9, 2026
Malicious code in py2ops (PyPI)
1 compromised version
- Oct 9, 2026
Malicious code in ig-gox (PyPI)
1 compromised version
- Oct 9, 2026
Malicious code in ig-gox (PyPI)
1 compromised version
- Oct 8, 2026
Malicious code in kafka-roller (PyPI)
1 compromised version
- Oct 8, 2026
Malicious code in kafka-helmsman (PyPI)
1 compromised version
- Oct 8, 2026
Malicious code in kafka-helmsman (PyPI)
6 compromised versions
- Oct 8, 2026
Malicious code in kafka-roller (PyPI)
7 compromised versions
- Oct 7, 2026
Malicious code in lore-cs (PyPI)
1 compromised version
- Oct 6, 2026
Malicious code in lore-cs (PyPI)
1 compromised version
- Oct 6, 2026
Malicious code in zencleaner (PyPI)
1 compromised version
- Oct 5, 2026
Malicious code in erc7730-hackathon (PyPI)
1 compromised version
Page 6 of 479