Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pepultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pi-cord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peppip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pcodestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pdatainstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paysafe-payments (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pb-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paysafe-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pcyodestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peppyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paysafe-kyc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peew (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepsi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pepgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pehttps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peppost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pdf-converter-pro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pckg-sv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peloton-clients (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pdsuax4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pd-py-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pdf2doc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pckaging (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pdsuax (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in peloton-client123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pephttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pathlib-v2-utility (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pathfiles (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pathfound (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pantheon-agents (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pathfinderpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in parsimonius (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paquete-5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalgame (PyPI)
1 compromised version
Page 135 of 479