Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,956 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in foundry-jupyter-extension (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in foungases (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forecolor5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forenity (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in formater (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fonafx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in foop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flycord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forecolors7 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forenith (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forestyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forgyps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forgepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flyio-token-client-efgh (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forenitq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forenitz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in forenits (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluiddaddy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flophttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flaw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in floogle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluxhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flexponlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flatfox-api-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flasl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flowpeek (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flatfox-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flexssl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluent-dashboard-panel-metrics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flycalc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flexitest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flyadmin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluffy-octo-broccoli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluent-panel-metrics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flexiconf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flowfix (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flashsimplelogger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flashinfer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flask-auth-sys (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ethereium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in financial-crimes-general-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flask-auth-system (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fkaks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flaks-setup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flag-leak-r (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flask-tdg-cyberx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fire-eye-bcs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fkask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in flask-tdg-cyber (PyPI)
1 compromised version
Page 188 of 480