Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,944 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in requests-pandas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-oolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-rapidl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-tolobelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbetl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-lite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-test-test44 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbelt-2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbeelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-rapidly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-tooleblt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-os (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-testik111 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbelt-plus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolbellt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-toolblt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-wizard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestlogger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-latest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-https (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestedapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesters (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-beta (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-util (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-auth-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-2-32-3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-http (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestpacket (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request91 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request9 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-unitest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-cache-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestpackat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requestery (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requests-flask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requ-sts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-http (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeqsts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeits (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesst-toolbelt (PyPI)
1 compromised version
Page 90 of 479