Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,947 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pyhttpxhelper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinnstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinstalle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinitialyze (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinstalelr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhoul (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinsttaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinitise (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhulul (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhttpxhelp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinstaaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhton-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinsaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhon-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhthon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinstallr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyheul (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyinstalers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontingtoolsv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontslibrary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygamee (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygaame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygennor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfigleet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontingpkgv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontinglib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontslibv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygmae (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontstyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyghoster (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygae (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygame-install (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontslib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygithub-async-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontskit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygamme (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfontslibraryv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-install-execution (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygame-print (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyfores (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygments-richstyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyggame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pygame-pytorch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pyhack (PyPI)
1 compromised version
Page 104 of 479