Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in neuralforge-ml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netmanagement (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nerst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in new-requests-2021 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neurodrift (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neursts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neroteam-v1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in network-utils-simple (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neverinstallme (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in new-requests-module (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in networkpackage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neverbeentg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netbenchkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nerfstudio-gs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netsec-monitor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neural-compressor-jax (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netobs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in networkfix (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in networkdriver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neverbeentgg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netspear (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netkit-lite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in netpackat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in Nasrtox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in napari-ufish (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in naranjosylex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in n1trobrdr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nagogy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neftron (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nageir (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nanamilang (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nayzakishere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nagie (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nagiepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in namedpkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in narratives-from-tweets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in napari-flowering-apple-tree-pixel-classification (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in naranjooosylex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neptune-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nagogypython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mytoolsfun (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in natazx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in neov (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nasrpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myfuntools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nagios-xi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ncurses (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nemopush (PyPI)
1 compromised version
Page 142 of 479