Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,938 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in scikit-llearn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikitt-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-leearn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in secmeasure (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scraapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sckiit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in search-python-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scrapyy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in seclab-research-depconf-test-2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sdf8998fs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikkit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in saml-helper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sampling-util (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sccket (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-elarn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-learnn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-learn-matplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sccikit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-leanr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sciikit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-leaarn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sc-concurrent-log-handler (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scappy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sciit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-laern (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikiit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in schubismomv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-lear (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sccrapy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-lean (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-earn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sciikt-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sciki-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in salesforce-sysutils-diagnostics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-larn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scikit-learrn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in schubismomv3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scanvia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in schemavault (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sc-oauth2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scarpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ryptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in s4transfer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sajadninja-sajad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in scan-checker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rwoka (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in s3ffs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in runtime-vitals (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sajadnewenc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in sankislayer (PyPI)
1 compromised version
Page 84 of 479