Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in lwplugin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lxsxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyrox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lucifer-example-0 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in m5tlprovetomegz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lsbs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lucifer5033 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in m-at-star-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyroxpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in mac12manoj (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lucifer9423 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lukz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyfamdorksgb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyft-service (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyft-avidl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in maatplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in m5tlnyakblwa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lucifertest2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyft-exceptions (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lubyrequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lulumortreux (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyft-settings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in luna-paysure (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lyft-core (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lsxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in logghelper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loganx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loveclose1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lowui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lobomarinopython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lognest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in logguru (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in looopiw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lowmovers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loggerex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loveclose2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lolcrazy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in logutilkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lofter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loveclose (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loggutils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loquru (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in logging-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loguru-utf8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loveahmedclose (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in log-guru (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcoremwassistant (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadlgtb (PyPI)
1 compromised version
Page 150 of 480