Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libstringstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudypyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrrandreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrreplacecpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringvmed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrproofurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringstringram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringstringgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrultrapush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudylibpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstudyguipip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringhackedhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsocks5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitminecraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringrandkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitvirtualload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libspatialindex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringkillpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitpostcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libreplaceultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libreplacepong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitrandomencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringpostvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsock (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitrandre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstrcraftint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitgameload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringpostmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringgetosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringsplithttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringgameload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libreurlping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitguipull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libreplacenvidiapost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libstringpaypalrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libsplitpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librereplacereplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libreplacegrandencode (PyPI)
1 compromised version
Page 155 of 480