Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in openblox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openae (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openai-spellcheckers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oopenpyxl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openai-mcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oopenwea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openai-async-helpers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oopensea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openai-py3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openasea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in open-vp-cal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openai-spellchecker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in opeenpyxl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in opemsea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in openaes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in onyxproxy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in onnxruntime-winml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in olorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in okinalek (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oepensea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oepnsea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ohta (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in officepyai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oillow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in olana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in omgd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in omigo-data-analytics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in offline-rl-congestion-control (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in omnigodz-random (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oepnpyxl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in okite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oenwsea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oenesea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oenpyxl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oenwea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oclip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oclips (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oensea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oca-pylint-plugin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oepenwea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oenasea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oe-extract-idss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in od7n (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in obfuscater (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in octopus32 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oauthapimojang (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oclorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oe-extract-ids (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in odoo-addon-spp-base (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in oculoushide (PyPI)
1 compromised version
Page 139 of 479