Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in loadkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in localstack-plugin-persistence (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in license-checker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lightseeq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in livekit-agents-hedra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in littelbitx0 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in llamagenerator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in llvm-aie (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libvmrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in license-txt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in license-utils-kit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libvmpushrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lightmock (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lightsequ (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in loadcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lium-io-gztensor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lixxyly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ligitgays (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in llmgenerator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libvmrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lightning (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lightfm-ext (PyPI)
1 compromised version
Page 151 of 480