Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,920 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in unclesky5910 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uploder-rubika (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in unreal-mladapter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in unizip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultragui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultramc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrarand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultratool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultramask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultramine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultralib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrapost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultravirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrapip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrapyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultragrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in types-for-adobe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ua-agent-generator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uihuihiuhiuhiu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in twittter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultracraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in turbocalcng (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ufish (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in turbocalc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uidesign (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultraget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultimate-ai-power (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in txwrap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in twrap-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in uconst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in type-extension (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultracv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in turbom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrahttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultracontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in twilio-rest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ue-python-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultrafasttelethon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in typing-extension (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in txdpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultracc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ultracandy (PyPI)
1 compromised version
Page 29 of 479