Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in sparsezoo-nightly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sorex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spark-ml-utilities (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spatialmedia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedyrequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedd-testing-bot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spaysdata (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spadata (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spammingsynonyms (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spammingsynonym (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sparklog (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sparsify-nightly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedtestpython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spacefilterapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speedquests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sparseml-nightly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soopsocks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in speed-testing-nt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spamsynonym (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spanner-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in spark-audit-notify (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sparkk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soolana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solidity-coverage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in some-random-package-33 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solanautil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solnaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solution-maker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solgpt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solidity-dev (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in some-malicious-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sonic-platform-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solanakit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solscan (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soupcsstools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sollana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sonic-config-engine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solna (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solanna (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solhint-plugin-hyperlane (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solaraund (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solders-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in souptools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solanaa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in someeebbb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soupclaw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in some-other-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in somepentest-test-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in solidity-build-guard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soultracker (PyPI)
1 compromised version
Page 61 of 479