Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libproofultrasplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullvisapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullurlcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullproofencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpushad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullsuperpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpullcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpulledping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofpywping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostrestring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostpushping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofcvgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofkillpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostvmgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofproofproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libposttoolgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libproofkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostpullpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongstringrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongvisacpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongsuperpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongurlvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libponggetpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libponginfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostcpumine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostmcstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostcpupaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostcvget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpostponglgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpongproofload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libposthacked (PyPI)
1 compromised version
Page 158 of 480