Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,938 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in rtxt-dep3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rpogressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rozenitro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rtxt-dep2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rsa2026 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ruamel-poc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roles-royce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ros2-demo-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in route-search (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rosolver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rolib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rompt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rostilesolver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ropie (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ropython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rowrap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxpython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxextra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rogiant (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat-utilities (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxapi-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxpy-advanced (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxfollowers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxapi-testy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rogiant-install (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rock51 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roblox-python-wrapper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat-additions (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roku-aihub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robux (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxmod (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rogressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat-addition (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboated (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robustinfer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboats-addition (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robloxrequestsss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roboat-util (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in roinject (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rogiant-quick-install (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rocketpill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rodll (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase-gui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase-dnb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase-install (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in robase-installer (PyPI)
1 compromised version
Page 86 of 479