Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,949 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in nanoinstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mzip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in nebulix-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myweb3toolz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-first-pypi-demo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-main-manager (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mysupergoodpython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myshellcode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-test-package-2025-xyz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mypypipkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-pipeline-watcher-poc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-fun-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myethertoolz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-test-packagexx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in murkh1111 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mylib-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in muxf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mypackage1337 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myasicapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myownpyfiglet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myfirstpackagetestaaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mvdream (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mymaldependency (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in musl-dev (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-service-manager (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mygens (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-package-jiecub3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myhexsender (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mytonctrl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myproject-bola (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in myproject234 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in my-super-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mysuperlicense (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multithreadedexecution (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mult-flow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiplerequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiutils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mulaptested-pakname (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mtvqa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mumupatcher (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in muktesittaban (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mrfeastpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mrbios (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in music-source-separation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiconnection (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiopython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mstplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mtaplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mumuplayer12 (PyPI)
1 compromised version
Page 143 of 479