Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,950 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in mumuplayer12 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in msgspec-python313-pre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mpkg123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multihttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiconnections (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mtplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mqbench (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiconnect (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multiconnects (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multicolored (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in multihttps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mvdream-threestudio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in modeflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mozautomation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in morty-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moonbit-metrics-validator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moonbit-locale-compat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in more-colors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in monkeyui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moooo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in monolit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in monlith (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in morin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moonitoring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moonbit-schema-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in morecolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moxel-python-driver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in moveworks-pipeline-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mozilla (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in morosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mousemovement (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in movers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in monoliht (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mkdsli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mistral-search-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mkdocs-dataopslive (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in modulelibraryv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mlc-llm-nightly-cu123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mlp-data-product-producer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mle-py-connector (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mirtos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mmatplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mistral-workflows-plugins-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mlflow-ui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ml-linear-regression-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mnemoniclib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mongland (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ml2000 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mlc-ai-nightly-rocm62 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mistral-workflows-plugins-mistralai (PyPI)
1 compromised version
Page 144 of 479