Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libultrastring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in liburlcraftgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libultratoolvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libultraultracc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libultraram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in liburlcandylgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libultrapushload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolmcver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperproofint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolintencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolrandomrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolloadsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsupercontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperkilltool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolpepcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsupergrandpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperhydrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperregrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperkilllib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperpongsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsupervisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudysplitping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtooladvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudytoolosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperpostcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudystring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolcraftgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsupervisaed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtoolcvgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudyreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libtasnl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsuperintram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudyrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudypipstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudyencodepaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrreget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrpushkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrpullpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudyencodere (PyPI)
1 compromised version
Page 154 of 480