Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in cvpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cxct (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cxfreezepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in customtinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cusromtkinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in currenttimerlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in customer-local-ops (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cuolur (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in customekinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in customtikinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in custrmtkinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in custvomtkinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in custm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cuolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cutepy32 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in currentclock (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in currenttimerpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in customtkintet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cusgtomtkinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cvcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctyps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cubifyanything (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctftestsowwy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cuatomtkinter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in curl-requester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctosec-appsec-wb-xray-adapters (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in culturestreak (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cugraph-service-server (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cubaflixdownload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cugraph-dgl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cugraph-service-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cryptograohy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctf-q21-empire-tmp-t0pw1ns (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctf-q21-empire-tmp-test124 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctosec-appsec-wb-xray-adapter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctf-q21-empire-tmp-test125 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ctf-q21-empire-tmp-test123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cryptoutilities (PyPI)
1 compromised version
Page 219 of 480