# List of Previously Submitted Malicious Packages?

**URL:** <https://discuss.python.org/t/list-of-previously-submitted-malicious-packages/27012>\
**Category:** Packaging\
**Tags:** help\
**Created:** [May 23, 2023, 2:08pm UTC](https://discuss.python.org/t/list-of-previously-submitted-malicious-packages/27012 "2023-05-23T14:08:19Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![CAM-Gerlach](https://sea2.discourse-cdn.com/flex002/user_avatar/discuss.python.org/cam-gerlach/32/3688_2.png) [@CAM-Gerlach](https://discuss.python.org/u/CAM-Gerlach)\
**Post date:** [May 23, 2023, 10:30pm UTC](https://discuss.python.org/t/list-of-previously-submitted-malicious-packages/27012/2 "2023-05-23T22:30:22Z")

</div>

Welcome to the Python Discourse! Just FYI, don’t forget to search for previous threads, and make sure your post is in the right category 🙂

This has been requested before, e.g.

> [@Make the list of denied packages on PyPI available to the community](https://discuss.python.org/t/make-the-list-of-denied-packages-on-pypi-available-to-the-community/9446/):
>
> Hi everyone, I would like to ask if there are any plans to make the list of denied packages on PyPI available to the community. If no, is this something to consider? Thanks in advance, Fridolin

There is an open issue to do this…

> <https://github.com/pypi/warehouse/issues/4703>
>
> \*\*What's the problem this feature will solve?\*\*
> Users who may have possibly ins…talled malicious packages don't have insight into what packages have been taken down by PyPI administrators.
> 
> \*\*Describe the solution you'd like\*\*
> PyPI should publish both a human-readable and machine-readable (API) list of malicious packages that have been taken down. Ideally the human-readable list would be sortable by package name, or by the date it was created/taken down.
> 
> \*\*Additional context\*\*
> Feature request to automatically uninstall packages via this API in \`pip\`: https://github.com/pypa/pip/issues/5777

Which then evolved into this proposed approach for handling it:

> <https://github.com/pypa/advisory-database/issues/45>
>
> Following from some \[discussion\](https://github.com/pypa/warehouse/issues/4703#i…ssuecomment-985270450) in https://github.com/pypa/warehouse/issues/4703, do we think that packages removed from PyPI due to being classified as malware, etc should cause advisories to be generated here?

---

_[View the full topic](https://discuss.python.org/t/list-of-previously-submitted-malicious-packages/27012)._