Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in process-support (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-dggrto-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in progresbsar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prof-tg-go-qu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prmpt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prmduc193 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppycodestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppysocks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in private-test-2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prgoressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in private-evolution (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pplgdfhuighsdfyisfdty (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in print-pip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prgressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pprompt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pretty-cli-logger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pplgdfhuighsdfyisfdty2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppsutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in print-django (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppyinstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppython-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in printrables (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in presudo-generate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppygame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pplgdfhuighsdfyisfgfd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppkt2synergy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prateek-yadav23 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in private-test-1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prime-math (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in prmopt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in private-test-4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in procoder (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pprogressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pretty-tabulate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppillow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppytorch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in posthttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in posthydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postgresserializer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in poststudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in posturl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postmine (PyPI)
1 compromised version
Page 129 of 479