Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,920 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in v2xlm-gml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veriftest1asdl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vervisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in veriftest1asdlaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in vantrala (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in verpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilmy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilswallet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlsser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in useregent-generator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in user-random-agent-user (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urrllib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in useragentclient (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilitytools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in useragents (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilitytool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utils-wallet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in user-rand-agnt-user (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in usss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in user-gen-agent-random (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urolib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in userver-requires-at-least-python-3-10 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utilitypyfunc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in usvr-agent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utils-hex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uurllib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlsssser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uuss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlssser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utils-pencaws (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utf-cleaner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in usar-agent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in utils-eth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urklib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlkib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcraft (PyPI)
1 compromised version
Page 27 of 479