Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libadtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libcandykillosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libc-dev (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libadhackedsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in leip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libadcvcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in leveup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lib-1779997093-yjeeqn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lbank-connector-pythons (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in leavemealone (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lebinfmt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in learning-pypi-demo-nisimi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lib-defender (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libadcvpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libadcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in letters-font (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lcick (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in legendevil1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in learning-curve-projects (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lgtbhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in layoutspecs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lapnet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in larger-batch-ctr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in largebatchctr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in larpexodus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in langraph (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in latencyget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lastweb3toolzbro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in latinum-wallet-mcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lazmat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in latentnerf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lan-clean (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lala6992 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lanm-neo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lakeflow-community-connectors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lab-3-package-438d82fc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lalpulsar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in kube-node-health (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in kube-health-tools (PyPI)
1 compromised version
Page 169 of 480