Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Sep 27, 2026
Malicious code in aseity (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in scrapetools2 (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in scrapetools2 (PyPI)
4 compromised versions
- Sep 27, 2026
Malicious code in aseity (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in caracas4check (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in coinscan (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in caracas4check (PyPI)
2 compromised versions
- Sep 27, 2026
Malicious code in coinscan (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrio (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrics-sdk (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in donutpromotion (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in claudedashbord (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in claudedashbord (PyPI)
4 compromised versions
- Sep 27, 2026
Malicious code in donutpromotion (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrics-sdk (PyPI)
3 compromised versions
- Sep 27, 2026
Malicious code in metrio (PyPI)
3 compromised versions
- Sep 27, 2026
Malicious code in donutautosellsrc (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in requests-cache-utils (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in donutautosellsrc (PyPI)
3 compromised versions
- Sep 26, 2026
Malicious code in requests-cache-utils (PyPI)
1 compromised version
- Sep 26, 2026
Malicious code in sherpy (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in sherpy (PyPI)
2 compromised versions
- Sep 25, 2026
Malicious code in tego-managed-agents-test (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in tego-managed-agents-test (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in reqparser (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in reqparser (PyPI)
2 compromised versions
- Sep 25, 2026
Malicious code in my-private-pkg (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in vercel-runtime-python (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in my-private-pkg (PyPI)
3 compromised versions
- Sep 24, 2026
Malicious code in vercel-runtime-python (PyPI)
4 compromised versions
- Sep 24, 2026
Malicious code in prosocks (PyPI)
1 compromised version
- Sep 24, 2026
Malicious code in prosocks (PyPI)
28 compromised versions
- Sep 23, 2026
MemoryOS 2.0.34 was published with a credential-stealing binary
1 compromised version
- Sep 23, 2026
Malicious code in memoryos (PyPI)
1 compromised version
- Sep 23, 2026
Malicious code in kerokwis (PyPI)
1 compromised version
- Sep 23, 2026
Malicious code in memoryos (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in kerokwis (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in poly-check-b (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in auclean (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in crypto-trader-py (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in snap-queue (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in auclean (PyPI)
3 compromised versions
- Sep 22, 2026
Malicious code in snap-queue (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in poly-check-b (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in crypto-trader-py (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in cloushaar-poc-exfil-91827 (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in cloushaar-poc-exfil-91827 (PyPI)
1 compromised version
- Sep 21, 2026
Malicious code in pullgetsage (PyPI)
1 compromised version
- Sep 21, 2026
Malicious code in pullgetsage (PyPI)
3 compromised versions
- Sep 21, 2026
Malicious code in starlette-healthchecks (PyPI)
1 compromised version
Page 8 of 479