Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Oct 5, 2026
Malicious code in erc7730-hackathon (PyPI)
1 compromised version
- Oct 4, 2026
Malicious code in anthropic-sdk (PyPI)
1 compromised version
- Oct 4, 2026
Malicious code in anthropic-sdk (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in zencleaner (PyPI)
3 compromised versions
- Oct 3, 2026
Malicious code in caoxiltts (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in caoxiltts (PyPI)
2 compromised versions
- Oct 3, 2026
Malicious code in voxcpmruntime (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in infrabench (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in infrabench (PyPI)
3 compromised versions
- Oct 3, 2026
Malicious code in voxcpmui4 (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmintel (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmkit (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmeval (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmruntime (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmintel (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmeval (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmui3 (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmkit (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmui4 (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmui3 (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in echogen (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxel-tts (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmtts3 (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in echogen (PyPI)
1 compromised version
- Oct 3, 2026
Malicious code in voxcpmtts3 (PyPI)
3 compromised versions
- Oct 3, 2026
Malicious code in voxel-tts (PyPI)
2 compromised versions
- Oct 3, 2026
Malicious code in voxeval (PyPI)
1 compromised version
- Oct 2, 2026
Malicious code in voxeval (PyPI)
4 compromised versions
- Oct 2, 2026
Malicious code in dedh-devops-automation (PyPI)
1 compromised version
- Oct 2, 2026
Malicious code in dedh-devops-automation (PyPI)
8 compromised versions
- Oct 2, 2026
Malicious code in shortneer (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in spo365-graph (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in shortneer (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in spo365-graph (PyPI)
4 compromised versions
- Oct 1, 2026
Malicious code in friendly-tools (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in friendly-tools (PyPI)
2 compromised versions
- Sep 30, 2026
Malicious code in beautifytext (PyPI)
1 compromised version
- Sep 30, 2026
Malicious code in friendly-greeting-tools (PyPI)
1 compromised version
- Sep 30, 2026
Malicious code in friendly-greeting-tools (PyPI)
11 compromised versions
- Sep 30, 2026
Malicious code in beautifytext (PyPI)
3 compromised versions
- Sep 30, 2026
Malicious code in cleanup-string (PyPI)
1 compromised version
- Sep 30, 2026
Malicious code in cleanup-string (PyPI)
1 compromised version
- Sep 30, 2026
Malicious code in bfox-build-utils (PyPI)
1 compromised version
- Sep 30, 2026
Malicious code in bfox-build-utils (PyPI)
1 compromised version
- Sep 29, 2026
Malicious code in queeuees (PyPI)
1 compromised version
- Sep 29, 2026
Malicious code in queeuees (PyPI)
1 compromised version
- Sep 29, 2026
Malicious code in aseitylab (PyPI)
1 compromised version
- Sep 28, 2026
Malicious code in aseitylab (PyPI)
2 compromised versions
- Sep 28, 2026
Malicious code in azure-langchain-example (PyPI)
1 compromised version
- Sep 28, 2026
Malicious code in azure-langchain-example (PyPI)
1 compromised version
Page 7 of 479