Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in install-pyyaml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in insanepackage21724342386744243242983 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in initer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in innostage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in insanepackage2179824234242342433 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instantcolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instarequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instascan-pro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in initialtestingdonotpull1235 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in install-pytest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in insanepackageongong11192 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instantobfosires (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in installyoura (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instaread (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in install-all-setup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in instacart-roulette-daemon-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in inlifegram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in innostage-group (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in insanepackage217234234242423442983 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infourl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in initializer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in inforam (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infosys (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infovm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infopost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infopyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infopip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infopaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infotool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infopy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infovirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in inkpy-jinja (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in initializers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in init2winit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in inject-rem (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infosuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infomine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoind (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infocraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in improvado-layout-panel-metrics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in indpack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infocpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infomc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infonvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infohydra (PyPI)
1 compromised version
Page 174 of 480