Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in mega-sparks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in me-dheeraj-moye-moye (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mecit3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mestin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mennort (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mescouilles (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in medifile (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in merino-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-transport-proto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-xyz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-runcmd-server (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-pdftool-plus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mchttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-runcommand-server2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-weather-full (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcp-runcommand-server (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mccc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mchacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mchypixel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mayalbl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mattermost-data-warehouse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matpplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mcgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mb-commons (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mccandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mchydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mattplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mathepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in maxload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matpltolib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matpltlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mccpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matlab-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matplottlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mattermost-airflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matpoltlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mccraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in maxpatrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in massconnect (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in matplotliib (PyPI)
1 compromised version
Page 147 of 480