Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in postmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ppandas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postgresql-connector-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in posttool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in popeye-shyam-love (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in porgressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pormpt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in portrait-mode-video (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in popyquests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in popeye-xyz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in postcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in posi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pompt-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pojang-resorter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polymarkets-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ponghydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polyutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in popeye-pip-v3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pongpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ponggrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pokemon-app-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in poc-nvk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in poenpyxl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polyclawd (PyPI)
1 compromised version
Page 130 of 479