Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in statsapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sqlalchemy-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in stillrequestsa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in statssol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in stationschedule (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ssimplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spyderlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sqiul83 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in srcapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sql-to-sqlite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in st-payment (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in st-py-de-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in squeezieontop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in steembase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spokeoapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spellcheckpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spellcheckers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spip-pth-demo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spokeo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spl-transpiler (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spiderxr-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splithydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spiderai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spl-types (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spykes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spider-ai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spl-token (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spl-token-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sphinx-rdt-theme (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sphinx-rtd-theme-cilium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sphinx-rtd-themes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sphinxcontrib-napolean (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in splitintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spoof-user-agent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spellcheckerpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedyquests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spaysrbx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spaysrbdata (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedquest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speed-testing-vps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spaysdatarbx (PyPI)
1 compromised version
Page 60 of 479