This catalogue contains malicious package advisories sourced from OSV.dev, an open database of security vulnerabilities. The data is refreshed hourly and currently tracks over 10,000 advisories.
Most advisories are for packages that were removed from PyPI before gaining significant adoption - typically typosquats or short-lived malware. Packages marked Tracked exist in the database with full download and repository statistics. Advisory IDs link directly to the full advisory on OSV.dev.
Total Advisories
Untracked Packages
Tracked Packages
Latest Advisory
| Advisory ID | Package | Summary | Published | Versions | Dependents |
|---|---|---|---|---|---|
| MAL-2026-17889 |
proxyrobika
Tracked
|
Malicious code in proxyrobika (PyPI) | 2026-10-15 | 0.1.0 | No tracked dependents |
| MAL-2026-17887 |
proxy-rubikis
Tracked
|
Malicious code in proxy-rubikis (PyPI) | 2026-10-15 | 0.1.0 | No tracked dependents |
| MAL-2026-17886 |
py-wormgpt
Tracked
|
Malicious code in py-wormgpt (PyPI) | 2026-10-15 | 1.0.0 | No tracked dependents |
| MAL-2026-17885 |
proxyrubika
Tracked
|
Malicious code in proxyrubika (PyPI) | 2026-10-15 | 0.1.0 | No tracked dependents |
| MAL-2026-17884 |
getpubip
Tracked
|
Malicious code in getpubip (PyPI) | 2026-10-15 | 0.1.0 0.1.1 0.1.2 | No tracked dependents |
| MAL-2026-17883 |
py-worm
Tracked
|
Malicious code in py-worm (PyPI) | 2026-10-15 | 0.1.0 2.0.0 2.0.1 | No tracked dependents |
| MAL-2026-17881 |
py-sock2
Tracked
|
Malicious code in py-sock2 (PyPI) | 2026-10-15 | 0.1.0 | No tracked dependents |
| MAL-2026-17877 |
saeka
Tracked
|
Malicious code in saeka (PyPI) | 2026-10-14 | 1.0.0 1.2.0 1.2.1 +23 more | No tracked dependents |
| MAL-2026-17880 |
seapy-ops
Tracked
|
Malicious code in seapy-ops (PyPI) | 2026-10-14 | 1.0.0 1.0.1 1.0.2 +5 more | No tracked dependents |
| MAL-2026-17863 |
crelic-bqwheel-52f66a3f1d
Tracked
|
Malicious code in crelic-bqwheel-52f66a3f1d (PyPI) | 2026-10-13 | 0.0.1 | No tracked dependents |
| MAL-2026-17862 |
fontcase
Tracked
|
Malicious code in fontcase (PyPI) | 2026-10-13 | 0.1.0 0.1.1 0.1.2 | No tracked dependents |
| MAL-2026-17861 |
sysdiagd
Tracked
|
Malicious code in sysdiagd (PyPI) | 2026-10-13 | 1.2.1 1.2.2 1.2.3 | No tracked dependents |
| MAL-2026-17847 |
npp-ml
Tracked
|
Malicious code in npp-ml (PyPI) | 2026-10-12 | 0.1.7 0.1.8 0.1.9 +1 more | No tracked dependents |
| MAL-2026-17866 |
pyyi
Tracked
|
Malicious code in pyyi (PyPI) | 2026-10-12 | 2.4.1 | No tracked dependents |
| MAL-2026-17809 |
minecraftaccfinder
Tracked
|
Malicious code in minecraftaccfinder (PyPI) | 2026-10-12 | 0.1.0 0.1.1 0.1.2 +5 more | No tracked dependents |
| MAL-2026-17755 |
agent-vx
Tracked
|
Malicious code in agent-vx (PyPI) | 2026-10-10 | 0.1.0 | No tracked dependents |
| MAL-2026-17756 |
pafer
Tracked
|
Malicious code in pafer (PyPI) | 2026-10-10 | 0.9.7 0.9.8 | No tracked dependents |
| MAL-2026-17757 |
webreader
Tracked
|
Malicious code in webreader (PyPI) | 2026-10-10 | 2.3.8 | No tracked dependents |
| MAL-2026-17753 |
media-manager5
Tracked
|
Malicious code in media-manager5 (PyPI) | 2026-10-10 | 0.1.0 | No tracked dependents |
| MAL-2026-17752 |
agentaix
Tracked
|
Malicious code in agentaix (PyPI) | 2026-10-10 | 0.1.0 0.2.0 | No tracked dependents |
| MAL-2026-17807 |
py2ops
Tracked
|
Malicious code in py2ops (PyPI) | 2026-10-09 | 2.2 | No tracked dependents |
| MAL-2026-17712 |
ig-gox
Tracked
|
Malicious code in ig-gox (PyPI) | 2026-10-09 | 1.0.0 | No tracked dependents |
| MAL-2026-17702 |
kafka-helmsman
Tracked
|
Malicious code in kafka-helmsman (PyPI) | 2026-10-08 | 99.0.1 99.0.2 99.0.3 +3 more | No tracked dependents |
| MAL-2026-17703 |
kafka-roller
Tracked
|
Malicious code in kafka-roller (PyPI) | 2026-10-08 | 99.0.0 99.0.1 99.0.2 +4 more | No tracked dependents |
| MAL-2026-17639 |
lore-cs
Tracked
|
Malicious code in lore-cs (PyPI) | 2026-10-06 | 1.0.0 | No tracked dependents |
| MAL-2026-17628 | erc7730-hackathon | Malicious code in erc7730-hackathon (PyPI) | 2026-10-05 | 99.0.0 | No tracked dependents |
| MAL-2026-17472 |
anthropic-sdk
Tracked
|
Malicious code in anthropic-sdk (PyPI) | 2026-10-04 | 0.1.0 | No tracked dependents |
| MAL-2026-17629 |
zencleaner
Tracked
|
Malicious code in zencleaner (PyPI) | 2026-10-03 | 1.0.0 1.0.3 1.0.3.1 | No tracked dependents |
| MAL-2026-17471 |
caoxiltts
Tracked
|
Malicious code in caoxiltts (PyPI) | 2026-10-03 | 0.1.0 0.1.1 | No tracked dependents |
| MAL-2026-17469 |
infrabench
Tracked
|
Malicious code in infrabench (PyPI) | 2026-10-03 | 0.1.0 0.1.1 0.2.0 | No tracked dependents |
| MAL-2026-17470 |
voxcpmruntime
Tracked
|
Malicious code in voxcpmruntime (PyPI) | 2026-10-03 | 0.1.0 | No tracked dependents |
| MAL-2026-17468 | voxcpmintel | Malicious code in voxcpmintel (PyPI) | 2026-10-03 | 0.1.0 | No tracked dependents |
| MAL-2026-17465 |
voxcpmeval
Tracked
|
Malicious code in voxcpmeval (PyPI) | 2026-10-03 | 0.1.0 | No tracked dependents |
| MAL-2026-17466 |
voxcpmkit
Tracked
|
Malicious code in voxcpmkit (PyPI) | 2026-10-03 | 0.1.0 | No tracked dependents |
| MAL-2026-17467 |
voxcpmui4
Tracked
|
Malicious code in voxcpmui4 (PyPI) | 2026-10-03 | 0.2.0 | No tracked dependents |
| MAL-2026-17464 |
voxcpmui3
Tracked
|
Malicious code in voxcpmui3 (PyPI) | 2026-10-03 | 0.1.0 | No tracked dependents |
| MAL-2026-17462 |
echogen
Tracked
|
Malicious code in echogen (PyPI) | 2026-10-03 | 1.0.0 | No tracked dependents |
| MAL-2026-17463 |
voxcpmtts3
Tracked
|
Malicious code in voxcpmtts3 (PyPI) | 2026-10-03 | 0.1.0 0.1.1 0.1.2 | No tracked dependents |
| MAL-2026-17461 |
voxel-tts
Tracked
|
Malicious code in voxel-tts (PyPI) | 2026-10-03 | 0.5.0 0.5.1 | No tracked dependents |
| MAL-2026-17457 |
voxeval
Tracked
|
Malicious code in voxeval (PyPI) | 2026-10-02 | 0.4.2 0.4.3 0.4.4 +1 more | No tracked dependents |
| MAL-2026-17455 |
dedh-devops-automation
Tracked
|
Malicious code in dedh-devops-automation (PyPI) | 2026-10-02 | 0.0.1 5.0.0 5.6.0 +5 more | No tracked dependents |
| MAL-2026-17422 |
shortneer
Tracked
|
Malicious code in shortneer (PyPI) | 2026-10-01 | 0.1.0 | No tracked dependents |
| MAL-2026-17421 |
spo365-graph
Tracked
|
Malicious code in spo365-graph (PyPI) | 2026-10-01 | 1.0.0 1.1.0 1.1.1 +1 more | No tracked dependents |
| MAL-2026-17419 |
friendly-tools
Tracked
|
Malicious code in friendly-tools (PyPI) | 2026-10-01 | 0.1 0.2 | No tracked dependents |
| MAL-2026-17416 |
friendly-greeting-tools
Tracked
|
Malicious code in friendly-greeting-tools (PyPI) | 2026-09-30 | 0.1.0 0.1.1 0.2 +8 more | No tracked dependents |
| MAL-2026-17417 |
beautifytext
Tracked
|
Malicious code in beautifytext (PyPI) | 2026-09-30 | 1.0.3 1.0.4 1.0.7 | No tracked dependents |
| MAL-2026-17325 |
cleanup-string
Tracked
|
Malicious code in cleanup-string (PyPI) | 2026-09-30 | 1.0.0 | No tracked dependents |
| MAL-2026-17319 |
bfox-build-utils
Tracked
|
Malicious code in bfox-build-utils (PyPI) | 2026-09-30 | 1.0.997 | No tracked dependents |
| MAL-2026-17286 |
queeuees
Tracked
|
Malicious code in queeuees (PyPI) | 2026-09-29 | 0.0.1 | No tracked dependents |
| MAL-2026-17240 |
aseitylab
Tracked
|
Malicious code in aseitylab (PyPI) | 2026-09-28 | 0.1.0 0.1.1 | No tracked dependents |