Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,914 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in beautiflusoup4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautiflsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautifulosup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautfiulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beaautifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautiflusoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautifullsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beauifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautiflsoup4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beaautifulsoup4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beauitfulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beautifullsoup4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in beatuifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bautifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in barcodegeneratorqr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in base-local-planner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbranger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in baidubsrc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in barcodeqrgen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbeautifulsoup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbitcoinlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in batchran (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bancor-simulation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bash8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bannerscript (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in batch-shipyard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in basic-arithmetics (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bavard-ml-common (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bautifulsoup4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bbllaacckkwwoollff (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in babel-preset-current-node-syntax (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in backtradingbot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in badgerdoc-storage (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in b10connoisseur (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in babetmf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in backwwi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bannerprint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awsgluedq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in backwwii (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in azerty123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in awsglueml (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in azure-ai-agentserver-githubcopilot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in azure-iothub-service-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in azureml-contrib-daskonbatch (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in bananaholder (PyPI)
1 compromised version
Page 238 of 479