Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in dell-restore-system (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deadiff (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in decoratoroperations (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ddim (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in debug-toolbar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dccsx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dcchbot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dccs-bot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepseeek (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ddiscord-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deeprce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dcbotoffline3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ddiscord-webhook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dde-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in deepmountains-rce (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dcbot-online (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dcreq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in decompopt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbzy-tools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbindicator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbgpkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datapipe-util (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databasetrace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in db-aggregator-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbt-bytedhouse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databaserotacos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databasesupasafe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbnodeindicator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databaseroboats (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datacamp-light (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbt-byteshouse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dataflux-pytorch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datasetsgraphviz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databasesupalake (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databaseroboat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databricks-tools-core (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datetime-zones (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datagov-harvester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databasetapes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dbsxrchpro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in datagraph (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databricks-clean-room-orchestrator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in databaserobooms (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-proxy-for-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-importer-brain (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-harvester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in data-platform-airflow-operators (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in d0rk3r (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in dabrius (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvpip (PyPI)
1 compromised version
Page 217 of 480