Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,945 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in reqeuest-new (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqest-dexfree (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqarg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqests-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reqesst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-ase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-matplotlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-os (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in repocket (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-flask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in repyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-pre-automate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-ase-automate (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in req-pre-automate1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in renderctx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in repull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replication-delay-client111 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reportgenpub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in renvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in repep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in regrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in remjsonparse (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in releycrypt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacead (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacecpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in repip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reequests-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in remc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in relefpots (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in remask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rendom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rensoflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rehttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacestr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in remine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in regixtest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in rehttps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replaceintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reequests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in renderkitcore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in regui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacesuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in regame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in reimagined-broccoli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in replacerand (PyPI)
1 compromised version
Page 92 of 479