Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in simple-discord-https (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simple-mali-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simplejsno (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in siempyl-sumo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in siitoogether (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in simlejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shleeh (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shiva123456 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sikit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shoots-api-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in siamphishtest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in silly-logger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shoots-flutter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shoaib-done-pack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in si-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in siimplejson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shot2story (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shokobo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sickit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shoots-bynet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shiwers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shadw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shellexec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shikitesting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shinel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shadowkw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shelipp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shermed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shan-lib-poc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shan-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shark-e2e-bnsneo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shinchina (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sherm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sherms (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sher-net (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shimi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shelley (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shaiduwkv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shiva-rao23 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sher-server-tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sentinelone (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sf-silly-goose-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in semurgdb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in shadow-scraper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sfnt2woff-zopfli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sentinel-tool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in serverkeeper-verifier (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in setupint3s (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in servantcord (PyPI)
1 compromised version
Page 64 of 479