Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in notsogood (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nowsys (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in np6helperhttptest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in not-so-evil-package-spaceylad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nspacercesolve (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nukeport (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in np6helperhttper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in novatwo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ntoctfutils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nowcl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nuerst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nspack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nukecount (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in node-db-indicator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in no-install-test-noinst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nofexhack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nonertheguy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nofex-hack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in node-scraper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newdontinstallthistest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ninja-core-optimizer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nhmpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nirohf-reverse-shell (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in niked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nfd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newgends (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpackagetest2024 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpackagetest2025 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ninja-ssh-proto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpipv3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nigpal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpackagetest2026 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpackagetest2028 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nexlang (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ninjainjtest1337 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nitro-checker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newcls (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ninja-core-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nextui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nflx-metaflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nezur (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpipv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in new-sql (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newpackagetest2027 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in newencsajad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in next-vit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nifty-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nitus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netfetcher (PyPI)
1 compromised version
Page 141 of 479