Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in dexscreener-data (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in diiscord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dicuser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dftester-pip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dial-xl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dify-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dfshoesadsm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dicsord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in directui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dicord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in detecron2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dexat2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in denomenallib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devicespoofer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in detectron4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency-confusion111 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in detectren (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demozecosso (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dev-pipline-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devilfree (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency133434fr43437 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devilpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency908 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dero-pip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devide04 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dev-server-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency-confusion123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devicespoof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devtools-webhook-cicd-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency1338 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency-confusion12 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demozecox (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dexscreener-charts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency-confusion-test-666 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in devilcore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dependency00011124931 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in defi-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-pipeline-check (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in defi-kit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepseek-fake (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demontonto1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dekugay (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepsolid (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demontonto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in defi-risk-scanner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demo-malicious-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepseekai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepseek-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in demozecob (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dell-recovery (PyPI)
1 compromised version
Page 216 of 480