Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pantheon-toolsets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paws-room-acoustics-simulator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in parseweb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in partpyth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paysafe-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paypalpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in para-gen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pathjoin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandasprox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in packagescraping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandaspytest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandas-numpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in parser-scrapper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandas-data (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandsa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pam98wyfupa98w (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in panda-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in panas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paintpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandirequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in passport-snapchat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in packagescrape (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in papara (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in packed-w3shi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in panads (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paquete-1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paperclip-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandaas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandaai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in panderequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pandarequest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in paradox-pydevdeps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in p8llow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in otc-metadata (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in osintvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in package-resources (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in package-346234294 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in packagemurder (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in package-346234293 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in p-cord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in osopackagepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oz-merkle-tree (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ovcdtwfcak (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in p7zip-full (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in p9llow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in packagemernado (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oxntime (PyPI)
1 compromised version
Page 136 of 479