Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in minecv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in midi-melady-extraction (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in methantiafkxd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in microsoftoauth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in midi-melody-extractions (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minecandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in microauth2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minead (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minecc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minehydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in milleday (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in microauth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in midi-melody-extraction (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minecraft-utilities-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in microsoft-helper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in metemask-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mgrcfg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minecpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mflux-streamlit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mevguard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in metoopro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mfq-private-encoder (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mi-test-99-tuapellido (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in minecontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in message-serializer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mecit1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in merpe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mdkjrkjelz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in memorylib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in merbe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mecit2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in meowsapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in memtools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in megai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in metamask-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in medoen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in md5-en (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcpsever (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in memlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in metadata-checker (PyPI)
1 compromised version
Page 146 of 480