Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in jsonschemavalidation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in just-framework (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jupiter-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonschemavalid (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jupphelp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jules-test-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jupyter-pytest-fi-console (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jupiterhelper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jupiter-helper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonschema-viewer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in just-test-framework (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in judyb-advanced (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonschemex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in javier-vidal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonschema-utf8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonconfig-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jas9do1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jie-utility-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jirawrapped (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonist (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jksandbox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in johnhammondontop183 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in joyboyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in javapatch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in johnhammondfanpackage124 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jatinangor-teleport-testing-zer0id (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in javascan (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jmdrs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jaqmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jd-mlops (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsbip39-decrypt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jinja22 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jsonreq-ase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jfqyotpnvb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iufgbewroibgfowiebc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ja3-hashscript (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in jamasp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwfef (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwef (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ixosmonitoring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iwantsafecheckit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ixosrestinterface (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in j5gnpuiwerbngpiutbgn0iutb0pfwef (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in is-number-object (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ipllow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in irasim (PyPI)
1 compromised version
Page 172 of 480