Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libramcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandomcrafthydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libramcpuhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywreproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libramreplacelgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandomcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandhackedstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandloadad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandloadmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandgrandpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywramgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in librandomcandycontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushinfogrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushrandlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushramosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpycpucontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushintpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushhttpget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushramvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpyinfogui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywpywcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywintelrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpycontrolsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushultrapull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpycc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpyminelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushrandcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpywgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpycccv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushcvpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpyosintinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpyhttplgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushgetkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushmasklgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpystudyre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullpywgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproxy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullpongpaypal (PyPI)
1 compromised version
Page 157 of 480