Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jun 8, 2026
Malicious code in tiktoken-mcp (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in tlask (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in rlask (PyPI)
5 compromised versions
- Jun 8, 2026
Malicious code in rsquests (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in nhmpy (PyPI)
2 compromised versions
- Jun 7, 2026
Malicious code in bittensor-burn-watch (PyPI)
16 compromised versions
- Jun 7, 2026
Malicious code in clip-logger (PyPI)
8 compromised versions
- Jun 6, 2026
Malicious code in ray-mcp-server (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in pyphetools (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in ppkt2synergy (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in phenopacket-store-toolkit (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in orchestr8-platform (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in langchain-core-mcp (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in instructor-mcp (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in gpsea (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in ensmallen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in embiggen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in dreamgen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in funcdesc (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in pantheon-agents (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-engine (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in coolbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique-ai (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in cmd2func (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in synago (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in okite (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in mrbios (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-http (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in bramin (PyPI)
3 compromised versions
- Jun 6, 2026
Malicious code in uprobe (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in pantheon-toolsets (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in nucbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in napari-ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in anthropy (PyPI)
6 compromised versions
- Jun 5, 2026
Malicious code in goodoltoulas (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in goodoldtoulas (PyPI)
1 compromised version
- Jun 4, 2026
Malicious code in sf-silly-goose-requests (PyPI)
2 compromised versions
- Jun 4, 2026
Malicious code in hpe-glcp-automation-lib (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in tronlabpy3 (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in fia-signals (PyPI)
2 compromised versions
- Jun 3, 2026
Malicious code in tronlab (PyPI)
1 compromised version
- Jun 3, 2026
Malicious code in internal-tracker (PyPI)
3 compromised versions
- Jun 3, 2026
Malicious code in spadata (PyPI)
2 compromised versions
- Jun 2, 2026
Malicious code in spaysdata (PyPI)
7 compromised versions
Page 7 of 233