Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,947 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in py-pullreplaceinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pullcvrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-prooflibhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pushinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-prooflibmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pullposted (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pullhackedurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pushintelhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pullrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pulltoolurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pullhackedmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongultravm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ponggrandnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-proofccmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postrandint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-poststudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postgameintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postvmosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongcpureplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ponghacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postcandymc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongtoolkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postrelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongedgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postvirtualreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongpostmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongpongpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongedvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postproofmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongmaskgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-posthydratool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postencodeencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-proofencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-postultrahacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pongvmstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pepproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pingcraftmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pingproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pingpipkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-piposintpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pingpostkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-pingintelosint (PyPI)
1 compromised version
Page 114 of 479