Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,948 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in py-codrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cofd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlcraftstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlpywrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-coqrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlpingcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlgettool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cofrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-coad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlstrcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlpymc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-coordd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cobrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controltool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-coerd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-controlramnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ckrd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccstringpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cird (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candymaskreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candynvidiakill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cchttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyhttpvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyproofstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cdord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candystring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccadsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccvmtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccvmpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccpongver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-cccontrollib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccmcstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candylgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccguigrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyhydrapep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candykillencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ckord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-ccrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyintcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-adrehacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-c9rd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candyhttpad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candycontrollgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-candycvproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-c0ard (PyPI)
1 compromised version
Page 124 of 479