Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- Jun 2, 2026
Malicious code in spaysrbdata (PyPI)
5 compromised versions
- Jun 2, 2026
Malicious code in jules-test-utils (PyPI)
1 compromised version
- Jun 2, 2026
Malicious code in bt-signal-utils (PyPI)
2 compromised versions
- Jun 2, 2026
Malicious code in quant-backtest-helpers (PyPI)
1 compromised version
- Jun 2, 2026
Malicious code in parsimonius (PyPI)
9 compromised versions
- Jun 1, 2026
Malicious code in imgmatrix-analysis (PyPI)
10 compromised versions
- Jun 1, 2026
Malicious code in redteam-qxz7-utils (PyPI)
1 compromised version
- May 31, 2026
Malicious code in discord-massban (PyPI)
1 compromised version
- May 31, 2026
Malicious code in obfuscation (PyPI)
3 compromised versions
- May 31, 2026
Malicious code in cscc-glass-house (PyPI)
4 compromised versions
- May 31, 2026
Malicious code in hell-cipher (PyPI)
1 compromised version
- May 31, 2026
Malicious code in h4xupdate (PyPI)
1 compromised version
- May 30, 2026
Malicious code in discord-ban (PyPI)
3 compromised versions
- May 30, 2026
Malicious code in neuralforge-ml (PyPI)
1 compromised version
- May 30, 2026
Malicious code in crypto-helper (PyPI)
1 compromised version
- May 30, 2026
Malicious code in cryptolock (PyPI)
2 compromised versions
- May 30, 2026
Malicious code in polymarket-data (PyPI)
2 compromised versions
- May 29, 2026
Malicious code in modulebuild3240234t (PyPI)
4 compromised versions
- May 28, 2026
Malicious code in lib-1779997093-yjeeqn (PyPI)
1 compromised version
- May 28, 2026
Malicious code in veloxml-cli (PyPI)
1 compromised version
- May 28, 2026
Malicious code in telethon-pro-safe (PyPI)
5 compromised versions
- May 28, 2026
Malicious code in my-test-package-2025-xyz (PyPI)
1 compromised version
- May 27, 2026
Malicious code in rogiant-install (PyPI)
1 compromised version
- May 27, 2026
Malicious code in quatres (PyPI)
1 compromised version
- May 26, 2026
Malicious code in hmacsync (PyPI)
1 compromised version
- May 26, 2026
Malicious code in cdktn-provider-datadog (PyPI)
1 compromised version
- May 26, 2026
Malicious code in cdktn-provider-newrelic (PyPI)
1 compromised version
- May 26, 2026
Malicious code in pywingui (PyPI)
5 compromised versions
- May 26, 2026
Malicious code in datapipe-util (PyPI)
2 compromised versions
- May 26, 2026
Malicious code in vectordb-engine (PyPI)
1 compromised version
- May 26, 2026
Malicious code in baidubsrc (PyPI)
1 compromised version
- May 26, 2026
Malicious code in docontrol-mcp (PyPI)
1 compromised version
- May 26, 2026
Malicious code in binproto (PyPI)
1 compromised version
- May 26, 2026
Malicious code in m-at-star-tools (PyPI)
3 compromised versions
- May 26, 2026
Malicious code in noteparse (PyPI)
1 compromised version
- May 26, 2026
Malicious code in massive (PyPI)
1 compromised version
- May 26, 2026
Malicious code in indextts-cli (PyPI)
4 compromised versions
- May 26, 2026
Malicious code in ranno (PyPI)
1 compromised version
- May 26, 2026
Malicious code in helu (PyPI)
1 compromised version
- May 26, 2026
Malicious code in mistral-search-toolkit (PyPI)
1 compromised version
- May 26, 2026
Malicious code in mistral-workflows-plugins-webhook (PyPI)
1 compromised version
- May 26, 2026
Malicious code in mistral-workflows-plugins-mistralai (PyPI)
1 compromised version
- May 26, 2026
Malicious code in mistral-workflows (PyPI)
1 compromised version
- May 26, 2026
Malicious code in xct-x-ayoub (PyPI)
1 compromised version
- May 25, 2026
Malicious code in edison-tools (PyPI)
5 compromised versions
- May 25, 2026
Malicious code in spip-pth-demo (PyPI)
2 compromised versions
- May 25, 2026
Malicious code in cch-agent (PyPI)
4 compromised versions
- May 25, 2026
Malicious code in heims (PyPI)
1 compromised version
- May 25, 2026
Malicious code in pylogkt (PyPI)
1 compromised version
- May 24, 2026
Malicious code in polymarket-data-fetcher (PyPI)
1 compromised version
Page 8 of 233