Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pip-remote-access-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilkow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilolw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingdomv3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pillov (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilloow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pill9w (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilliow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilloww (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pip-goodthing (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilliw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilloq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilpow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pillo2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilloa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilloo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pinglgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piolow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pinkhippodirty (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pingcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pilllow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in perfviewer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piauthorizer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peptest2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piedefender (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in phasedibd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in physisyphus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in permsupping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in phishermanx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in phantomdecoders (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peptest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piirgg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in petace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peptool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in phenopacket-store-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piepunk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in phantomdecoderss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in perfkitbenchmarker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in piano-transcription (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pgmysql (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in photo-extractor (PyPI)
1 compromised version
Page 134 of 479