Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in sys-ej (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscolouringsextv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscoloringaddons (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sys-scikit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in synium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in synthetictest1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscolourkitsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sys-selenium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sysfontinglib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscryptlibv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syntax-init (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syntaxlogger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscoloringspkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sysfontingpkgv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscolorv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sysconx4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syschecker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscryptpackagev1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in synapseml-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscryptolibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscoloringspkgs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syncagents (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscolouringkitsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscoloringextensionv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syscolourtoolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in syns-knox-xss-allwhere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in swiftypy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in synago (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in svchost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sylexnaranjo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in supersafepackage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sxz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in support-developer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in suyo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in swisscom-ai-research-keyphrase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in supervm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in svcmanagement (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sylex-syntax (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sympy-dev (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in swapoc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in synapse-x (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in support-hub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in swampo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in supervisors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sylexnaranjoo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in swiv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in superurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in svcmanager (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in supersafecalc (PyPI)
1 compromised version
Page 57 of 479