Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pipcrypto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolourpackagesv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptographylibaryv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolouringskitsv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptliberyv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolourmodulev1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolouringskits (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolouringv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptographylibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptographylibraryv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolouringslibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptov2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptomodsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptoaddonsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipeline-poision-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolourlibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptov4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcryptlibary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorpkgv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorlibraryv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorlibv3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcoloradds (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcoloringlibary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcoloraddonsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolourextension (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcoloringsextv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorize (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolorpkgv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolortoolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcolouraddonsv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipcoloringliberyv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pinstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pillw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pik-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pillkw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pinloggertest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pipad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pillox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pip-rce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingcontrol (PyPI)
1 compromised version
Page 133 of 479