Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in socksproxies (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sloana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in soali (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in smartsheet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in social-scrappers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in smiplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in snwproxies (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in snapshot-photo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sl-pgp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ska-low-cbf-fpga (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sjc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sisaws (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in skillspector (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sitoogether (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in site-messanger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sintok (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in slana (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sipmlejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sketchfab-spinner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sintaxisoyyo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in skydeo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sklern (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sinontop-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sintaxiscodigo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sklearns (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in siplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simple-text-parser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simple-api-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejso (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplesjon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpllejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejosn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejsson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejjson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpljeson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simmplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpeljson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpleson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simlpejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sincpro-logger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejsonn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpljson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simpleejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejsn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejsoon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in singtok (PyPI)
1 compromised version
Page 63 of 479