Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,944 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in requesks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requess (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requekts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqtrade (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeqts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeses (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqsests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-httpx-4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesgs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requessts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-plus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reques (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesqs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeests-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requess-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesrts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesgt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-httpx-9 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requas (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requesr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reque (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in request-get (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requeksts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in requessts-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeustz (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeusts-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeuste (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqquests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqquest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqpack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqiest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqinstall (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeuts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqoests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeyst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeustx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqquests-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqjuests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqest-2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req6 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqests-2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeist (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeosts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqargs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req7 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqests-2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeuest-2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqeuest-new (PyPI)
1 compromised version
Page 91 of 479