Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in database-roblox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databasenaps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in darkmanontop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databaselooks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-observability-core (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-observability-validation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dash-grid-normalizer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-parser-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-dbt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-airflow-recipes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-processing-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d1snakegame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d1n0-exploit-aaaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in darkglitch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyberday26szymon-payments (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d5e54nc32y1337 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyrptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyberday26szymon-auth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in daft-dashboard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d1n0exploitaaaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d0rk3r-telemetry (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyrptocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d5e54ncy1337 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyberday26szymon-logging (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dabrius-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyptocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in darkig (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d4rktg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cycode-dev (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dakhara (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dahood (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cxt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cxcxcx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cyberart (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvint (PyPI)
1 compromised version
Page 218 of 480