Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,893 total in pypi · sorted newest first- Oct 21, 2026
Malicious code in debbug (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in jiklpo-tsunari-kay (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in ssemver (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in hijiko-pilaka (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in deebug (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in trijigo-kalip (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in facewareretargeter (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in hijok-lampam (PyPI)
1 compromised version
- Oct 21, 2026
Malicious code in semer (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in ssemver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semer (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in debbug (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in deebug (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in hijok-lampam (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in trijigo-kalip (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in jiklpo-tsunari-kay (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in hijiko-pilaka (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in facewareretargeter (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semveer (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semmver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semverr (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in security-research-startup-snapshot-810764b303 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semvver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in research-probe-6150c1c915 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semvver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semveer (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semmver (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in semverr (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in security-research-startup-snapshot-810764b303 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in research-probe-6150c1c915 (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workcalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in test-workalendar-internal (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in pafex (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in resion (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in pafex (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in resion (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in workcalender (PyPI)
1 compromised version
- Oct 20, 2026
Malicious code in test-workalendar-internal (PyPI)
3 compromised versions
- Oct 20, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabdeploycheck (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabtoolkit (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabdeploycheck (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in fabtoolkit (PyPI)
4 compromised versions
- Oct 18, 2026
Malicious code in leakdeep (PyPI)
1 compromised version
- Oct 18, 2026
Malicious code in leakdeep (PyPI)
9 compromised versions
Page 4 of 478