Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in edcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in edgehttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easyaillm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easyhttprequest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easypydb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easytimestamp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ebe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easyascii (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in edgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ebsocket-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easyrequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easyreg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easycap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in easy-https (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in e3po (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dsodelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dstill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dzuseragents (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dsicord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dwh-kafka-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in duc193 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dumers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dsicord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dshttpslib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in e89-security (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dscss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dt-validator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dtb-bytehouse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in durabletask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dsidelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in duck-test-pkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in donotinstall (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in do-not-install-this-package-002 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in doxer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in document-inference (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in do-not-install-this-package-001 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dscord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in do-not-install-this-package-003 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dontdownloadthis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ds-lime (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dotenv-sync (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dreamfusion (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dscripting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in do-not-install-this-package-004 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dpy-bot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in donotdownload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in donotinstallthisistest5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in doverius (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in docontrol-mcp (PyPI)
1 compromised version
Page 212 of 480