Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-f70fc6dd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-736f752d (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-76a351f5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-89883da3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-77d0c154 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-e46d5661 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-b55680cd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-e90915e1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-b9485a2f (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-7e532784 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-ccd28738 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-392c6acd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-9fde789f (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-438d82fc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-f0727516 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-db7d716a (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-e7ffd2ef (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in argspython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aristanetworks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in arielbogo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-2387cbf7 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-1b4d0db5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in archiveact (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-3ccf47e8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in arnold-toolbox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in args-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-02f73e0e (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in arangodba (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-34b21b63 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in arrayvec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ariadne-federation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-153c1c1a (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in arnavtest123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-0c8bce1c (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-1f7a39bc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ark-vmp-reverse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in argsreq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-24ddbc49 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in artifact-lab-3-package-2387a34d (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aphorism-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aocl-sparse-v2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in appetize-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aphisherman (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in apple-tv-new (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aounitaounit2 (PyPI)
1 compromised version
Page 241 of 479