Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in selfpywhydragui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpyosintmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframintelosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selframcandysplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpywpipvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpywpaypalultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpyhydralgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullpywcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullrecontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullstringpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushramhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushmcsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpyhackedpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushurlosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpyccvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullsplitcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpushlgtbnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullstringtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullstringver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullsplitcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpyintpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullvisaed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofloadram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpostramurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofpullsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofpingpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullgameload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfprooflibpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullgamegame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpoststringvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpostsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpostver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofpipmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpostponghydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullpingnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofstudyvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofhttpsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpullcchydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofkillcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofcvrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfpostramstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfprooframad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in selfproofstudyrand (PyPI)
1 compromised version
Page 71 of 479