Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libpepcandymc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintpostvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintnvidiapull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpeppingpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintliblgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalurlstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintramcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalcpugrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintstringcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalpullsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintultrapyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalhackedlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalcontrolultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalpaypalrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalintpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libpaypalpingnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintlgtbstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintgrandinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintguiram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiapippaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiasplitpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiavmad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libopenblas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiaencodehacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiapeppull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiamcver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiareplacerandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiamcad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libosintcvkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiarecontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libminekill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libminerandomosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcrandompep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libminestudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libminevisarand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcmaskkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcpongvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcpywcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libnvidiacpustr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libminepushrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcpingstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmineurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libmcrandomre (PyPI)
1 compromised version
Page 160 of 480