Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,920 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in virtualcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vielcord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtuallib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vfsrcetest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in viplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vfsrce18 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vfat-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualebv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in virtualpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vibrant (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in validatekey (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vercc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vernvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vcdiff-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vfat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in venv-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veilcord-tls (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veriftest1asdlaaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vertica-parser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in venomenallib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in v2mlx-gml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veriftest1asdla (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verifysteream (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veriftest1asdlaaaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uwjimvosfdrlbvn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uuzip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veloxml-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in v2-8-3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vectordb-engine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uzip (PyPI)
1 compromised version
Page 26 of 479