Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,956 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in grandpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in graphcore-cloud-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gradio-videotimeline (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gramapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gradientcolors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in grandcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gpu-free-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gorilla2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gptminifast (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in graddio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gptall (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in google-cloud-iam-credentials (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in google-play-store (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gpsea (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gr-mg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gpt-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gprofiler-logging (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in google-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in google-search-result (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gpu-discovery (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in googleapis-googleapis-grpc-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in goodoldtoulas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in glovo-data-platform-declarative-airflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in globrex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in goldensweatshirtwifi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in glovo-data-platform-importer-brain (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in glovo-data-platform-declarative (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in google-appengine-ext (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in gmacpyutil (PyPI)
1 compromised version
Page 183 of 480