Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in crunchie (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crustyhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in credential-python-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crryptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypotfeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in credential-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cryostar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crryptocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crptocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crpt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crypotcompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crafturl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crazehub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crc32fast (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crafttool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cra-template-snap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cputool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpumask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpusuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftinfo (PyPI)
1 compromised version
Page 222 of 480