Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in dns-execution-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in donotinstallthisistest6 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in driftme (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in doughnuts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dscord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dremel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in doisomgcxog (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dns-lexiconrequests-mock (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dmp-suite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discord-webohok (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-bkvision (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dmnstnd-http3-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dmclc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-storage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dlibex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-b64-img (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-pyyaml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dlty (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in djangoframework-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dlocal-cli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discself (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-aerospike-sessions (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in distpro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in django-auth-middleware-plus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disscord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dividedinkedwarpdrive (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in djanggo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ditenv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disocrd-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disocrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in diuser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in displaydoc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disocrd-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disksweep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dispatch-internal-plugins (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in disscord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discrod-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordrolex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordpy-v3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discould (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discorrd-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordwebutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordrequ (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordrlbypasser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discorrd-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordwebutils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordreqq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in discordsync (PyPI)
1 compromised version
Page 213 of 480