Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Sep 21, 2026
Malicious code in starlette-healthchecks (PyPI)
2 compromised versions
- Sep 21, 2026
Malicious code in rrs (PyPI)
1 compromised version
- Sep 21, 2026
Malicious code in rrs (PyPI)
20 compromised versions
- Sep 19, 2026
Malicious code in urc (PyPI)
1 compromised version
- Sep 19, 2026
Malicious code in urc (PyPI)
1 compromised version
- Sep 19, 2026
Malicious code in py-venv-doctor (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in py-venv-doctor (PyPI)
2 compromised versions
- Sep 18, 2026
Malicious code in requests-triwes (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in requests-auroras (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in pyjstat-smooth (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in index-forum (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in requests-asetwe (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in requests-auroras (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in requests-triwes (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in requests-asetwe (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in index-forum (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in pyjstat-smooth (PyPI)
18 compromised versions
- Sep 17, 2026
Malicious code in aiosendletter (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in aiosendletter (PyPI)
9 compromised versions
- Sep 17, 2026
Malicious code in marketing-mcp (PyPI)
1 compromised version
- Sep 17, 2026
Malicious code in marketing-mcp (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in trongappy (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in trongappy (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in praetorian-mind-rce-test-2026 (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in praetorian-mind-rce-test-2026 (PyPI)
3 compromised versions
- Sep 16, 2026
Malicious code in licloud (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in cli-anything-ai-market (PyPI)
1 compromised version
- Sep 16, 2026
Malicious code in licloud (PyPI)
2 compromised versions
- Sep 16, 2026
Malicious code in cli-anything-ai-market (PyPI)
2 compromised versions
- Sep 16, 2026
Malicious code in faiss-cpu-avx512 (PyPI)
1 compromised version
- Sep 14, 2026
Malicious code in faiss-cpu-avx512 (PyPI)
8 compromised versions
- Sep 13, 2026
Malicious code in chroma-client (PyPI)
1 compromised version
- Sep 13, 2026
Malicious code in chroma-client (PyPI)
1 compromised version
- Sep 12, 2026
Malicious code in python-fork (PyPI)
1 compromised version
- Sep 12, 2026
Malicious code in python-fork (PyPI)
2 compromised versions
- Sep 12, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextutils-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextkit-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in eth-account-web3 (PyPI)
1 compromised version
Page 9 of 479