Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in infohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importlibs-resources (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infomask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infogrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imgmatrix-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importscraper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infocandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infocv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in incaperror (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infogame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importsetup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infoget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infocontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in infogui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in import-license-checker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importlib-metadate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importlibs-resource (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imagesolverpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imageoi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imagedream (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imad213tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in image2hex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ilovenyxx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imad213insta (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in implejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imagedreamfusion (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in imapping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in importlib-resource (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in image-dream (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ic-flow-platform (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in idtotoken (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iconnect (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ignore-ssl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iiris-new (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in identityapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ic-flows-platform (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hypixel-coins (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iam-enumerate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iiris-new2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iamenumerate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ibtcoinlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in icloudprocessor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ibreak (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ilfkdygupbscneu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in icinga (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in idscord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in idscord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iamenumer (PyPI)
1 compromised version
Page 175 of 480