Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in py-encoderam (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodepushhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodepushsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodeinfogui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edpullmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edpipcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edpushinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodeping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-czrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cyrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edccload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cxrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvstrpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvverload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvvisacpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-encodehackeded (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cwrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edrandomre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvvmreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-edpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftnvidiamask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvpepurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftpongsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvcrafturl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvmcmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvposthydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpupipgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftreplacegui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftguire (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-crodd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpurandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpucvpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpuintre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvloadpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpunvidiacraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cvstringed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cpuvirtualpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-craftreplaceproof (PyPI)
1 compromised version
Page 122 of 479