Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,919 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in xoloqmotdjpbic (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxrwiter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlatency (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrtier (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlswxriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwiter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xolobbbccc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloaydpctxiyp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlxswriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwriterr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrietr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloazfgyobkaw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xforpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwriiter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrier (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xmsgpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xoloayihnhlayp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xmlbuilder3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xct-x-ayoub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xmrig-miner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xinference (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwritre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xiedemo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xllsxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwritr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwriteer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwrriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlssxwriter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xlsxwritter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wweb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xbox-authorization (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xenlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xhttpsp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xfilesyncerx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in x2vml-gml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xfoofoox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wmi-toolbox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xcepthttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in worldhello (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in x2vmlgml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in wweb3-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in worldnex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in xboxlivepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in workingitmehelpit (PyPI)
1 compromised version
Page 19 of 479