Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pnuske (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polymarket-data (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pokee-data-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pollow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pndas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polydata-analytics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pogressbar2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in playwright-atoned (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pocpackage1234 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in poc-suppentest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polymarket-data-fetcher (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pnadas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in polidoro-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piynstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plasticswampbubble (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plutodebug (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in playwrgith (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in playwright-acustomed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pjllow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pitest117 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plutotesting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in playwrightr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plutotestingagain (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plural (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piprce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in plutotestingagainn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in platform-harness-ecr-configmap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pitest115 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pkproxy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pirlow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in platforms (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pirxcypackage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pkg-fallback (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pllow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piptyper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipscrape (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipsqlitedblibrary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipsqlpackagev2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipmodule83 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipsqlimodv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipsqliext (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pippaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piprequester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pippep (PyPI)
1 compromised version
Page 131 of 479