Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in selfstradmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplitpushcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplitpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstrminegui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstrkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplithackedgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringrandomcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringlgtbhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringrevisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringpaypalcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplitad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringguiram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfstringlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplitcpuload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfsplitultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrereplacetool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrelgtbgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreloadlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacead (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacevisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacerandget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrecvstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrekillrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrepushencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfregamelgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplaceminepep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacesplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacepong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrerandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfregetcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacemchydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacesuperpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplaceencodepush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfremask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacereplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrelibstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacetoolreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacetoolstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrehttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfreplacelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrandomhydratool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframstudyget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframpipmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrecandyping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframrandommask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrecpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfrandompywosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframsplitstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframstring (PyPI)
1 compromised version
Page 69 of 479