Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in ziggonext (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zamino (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zking (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zebo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zelixnitro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zhopaorlaaato (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zeubilamouche (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zefkopzekfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zhpt1cscoe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zlapp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ziphash (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zipf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zip-me (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ypj (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ytorch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in your-module-name (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ypthon-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in youtubebot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ytest-cov (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in youreallydontwantthispackage2132 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yzip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yvper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in youtube-new (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ysocks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zafira (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yt-yson-bindings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ypinstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ypcodestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in zabitog (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yolov8mini (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in youreallydontwantthispackage2131 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yt-api-dlp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ypsocks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yyfinance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ygame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ython-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yuzo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yc-as-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yc-depconf-test-807dff (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yellyproxies (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yeshsurya (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinane (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ycodestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinnce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xuiniadb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinaance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xwormclient (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yfinancce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in yffinance (PyPI)
1 compromised version
Page 17 of 479