Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,946 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in pytiob (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pytiom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonfontsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythondm32 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptov4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqladdonv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqlitepkgsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptolibv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsftpservermanuel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqlitev1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptv10 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptpkgsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonhttpx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pytimicer-c (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonfontingv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonn-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqliteaddition (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonscrapertool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptov2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqlitetool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptographypackage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqlitedbextv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonsqlite2mod (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncryptolibrary (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoon-binance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonpathenv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonfontingaddonv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythun (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pytimed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-requirements-inspector (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncoloringslibv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-uvicorn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-sdkcore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncoloringkitv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncolorv4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python3-autopep8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python3-shodan (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-rootpath (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncolorlibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncaptchasolver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncoloraddonv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncolouringaddsv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncolourlibraryv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonbitcoinlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-tg-bot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python-ledgercommon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythonbinance (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in pythoncolouringslibv1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in python3-6 (PyPI)
1 compromised version
Page 98 of 479