Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in py-adreplaceinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-c0dd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-c0red (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-c0crd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candycandypull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-base58 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adtoolurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adrandget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in puttytitle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adrandomintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adpywpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adedgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adintelint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in putyourgrabbernamehere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pustil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adadcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pwn-control (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pulsecord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adpongultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pwnstar-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adencodeping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pxz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adpaypalkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adproofosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pxdbench (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pullmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in push2web (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in public-address-generator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pushhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pullpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in puan3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pullrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pullvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pullow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in puan31 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in puffionerlolpo2131 (PyPI)
1 compromised version
Page 125 of 479