Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in adinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adandv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adanbu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 1q847 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in accesspdp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adafruit-display-text (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acapy-agent-didx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adafruit-imageload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aaaazzzzaz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acpi-tables (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 90456984689490856 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in a1rn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acloud-clients (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in account-eth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 7miners (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acme-widget-layout-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aclient-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in abseil-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in a3s-code (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in abilityrequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in abhamzufu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in a-oder (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in aaiohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acloud-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in adad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in acloud-client-uses (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 48484efej8id (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 3m-promo-link-gen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 3web-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 3web (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 3-0 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 233-misc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 3m-promo-gen-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 7-0 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 4123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 191239aa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in 1923tsl1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reimagined-broccoli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in lebinfmt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in colorstack (PyPI)
2 compromised versions
- Jul 21, 2026
Malicious code in rasterkit (PyPI)
3 compromised versions
- Jul 21, 2026
Malicious code in rasterkit-demo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in fluffy-octo-broccoli (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in trongridmy (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in trongrider (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in roles-royce (PyPI)
2 compromised versions
- Jul 20, 2026
Malicious code in defi-kit (PyPI)
1 compromised version
- Jul 20, 2026
Malicious code in automatic-octo-invention (PyPI)
4 compromised versions
- Jul 20, 2026
Malicious code in ml-core-airflow-auth (PyPI)
1 compromised version
Page 246 of 479