Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in progrsesbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbr2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in promogen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in promppt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prompt-oolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progresssbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-fast-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in project47 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in projectxlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in projectp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prommpt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progrssbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-api-metrics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prolificdreamer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-quicker-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prompt-tolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progrressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbra2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prompt-otolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressabr2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressba2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbarr2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in projz-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-analysis-1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbaar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressbar22 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prometheus-quick-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prompt-tookit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progressba2r (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-gdghho-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in program-admin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-qx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progessbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-qux (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tgqu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progresbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in proggressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in procwire (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-gjho-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progerssbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prodaccess (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-quotex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progreessbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-dooorto-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-to-qu (PyPI)
1 compromised version
Page 128 of 479