Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
11,630 total in pypi · sorted newest first- May 24, 2026
Malicious code in polydata-analytics (PyPI)
2 compromised versions
- May 24, 2026
Malicious code in whatsfly-labfox (PyPI)
2 compromised versions
- May 24, 2026
Malicious code in env-loader-cli (PyPI)
2 compromised versions
- May 24, 2026
Malicious code in data-pipeline-check (PyPI)
2 compromised versions
- May 24, 2026
Malicious code in git-config-sync (PyPI)
2 compromised versions
- May 23, 2026
Malicious code in fastapi (PyPI)
1 compromised version
- May 23, 2026
Malicious code in mistral-evals (PyPI)
1 compromised version
- May 22, 2026
Malicious code in solidity-build-guard (PyPI)
1 compromised version
- May 22, 2026
Malicious code in defi-risk-scanner (PyPI)
1 compromised version
- May 22, 2026
Malicious code in eth-security-auditor (PyPI)
1 compromised version
- May 22, 2026
Malicious code in cryptowallet-safety (PyPI)
1 compromised version
- May 22, 2026
Malicious code in notebook-intelligence (PyPI)
3 compromised versions
- May 22, 2026
Malicious code in pulumi-vcd (PyPI)
2 compromised versions
- May 22, 2026
Malicious code in ml2000 (PyPI)
1 compromised version
- May 22, 2026
Malicious code in gt-tester-exp-profiler-exp-00000017 (PyPI)
1 compromised version
- May 22, 2026
Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI)
1 compromised version
- May 22, 2026
Malicious code in sklern (PyPI)
6 compromised versions
- May 22, 2026
Malicious code in vulndify-mcp-server (PyPI)
1 compromised version
- May 22, 2026
Malicious code in pylogft (PyPI)
2 compromised versions
- May 22, 2026
Malicious code in pylogfmt (PyPI)
1 compromised version
- May 21, 2026
Malicious code in mathepy (PyPI)
14 compromised versions
- May 21, 2026
Malicious code in fakehuop (PyPI)
4 compromised versions
- May 21, 2026
Malicious code in pgrayy-wasmtime (PyPI)
2 compromised versions
- May 21, 2026
Malicious code in lognest (PyPI)
5 compromised versions
- May 21, 2026
Malicious code in tensor-compute (PyPI)
1 compromised version
- May 21, 2026
Malicious code in nvidia-nat-semantic-kernel (PyPI)
3 compromised versions
- May 21, 2026
Malicious code in wdt-erpmcp (PyPI)
3 compromised versions
- May 21, 2026
Malicious code in selfservsweeper (PyPI)
1 compromised version
- May 20, 2026
Malicious code in obs-migrate (PyPI)
1 compromised version
- May 20, 2026
Malicious code in instal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in txdpy (PyPI)
1 compromised version
- May 20, 2026
Malicious code in strawberry-graphql (PyPI)
1 compromised version
- May 20, 2026
Malicious code in vlifegram (PyPI)
1 compromised version
- May 20, 2026
Malicious code in libhmac (PyPI)
4 compromised versions
- May 20, 2026
Malicious code in openclaw-agent (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-internal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-commands (PyPI)
1 compromised version
- May 20, 2026
Malicious code in stripe-utils (PyPI)
8 compromised versions
- May 19, 2026
Malicious code in morin (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in aurapro-ui (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in aurafarmer (PyPI)
1 compromised version
- May 19, 2026
Malicious code in silly-logger (PyPI)
3 compromised versions
- May 19, 2026
Malicious code in openirf (PyPI)
1 compromised version
- May 19, 2026
Malicious code in eplang (PyPI)
4 compromised versions
- May 19, 2026
Malicious code in pycalendar-api (PyPI)
1 compromised version
- May 19, 2026
Malicious code in glass-of-water (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in nebulix-ai (PyPI)
2 compromised versions
- May 19, 2026
Malicious code in saas-common-lib-473815 (PyPI)
5 compromised versions
- May 19, 2026
Malicious code in clearml-truen-patch (PyPI)
1 compromised version
- May 19, 2026
Malicious code in soundsource (PyPI)
1 compromised version
Page 9 of 233