Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,920 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in urlpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlllib321 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllib-slim (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllbi3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllib33 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlliib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllibb3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urelib3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in url-validatorindx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlli3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urllitelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlli3b (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in urlreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in updateuuid4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in upgrade-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in upggrade-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in upgrade-requestss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in umap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uprobe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in updater12 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in unzipxz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in upllib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in unrartest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uniswap-math (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in upgrade-requestt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in update-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultravm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in unicore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrasuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in update-request (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in update-mss (PyPI)
1 compromised version
Page 28 of 479