Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in craftmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpure (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpupyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in crafthttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in craftmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpumine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpupost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpu-optimizers2-33 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpucheck (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpucraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpupy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coredxloader (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpu-optimizers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpucpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpukill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpumc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpuhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpupip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpulib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpucandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpugui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpupep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpugrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpucontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cppython-core (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in corexloader (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in Costrar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in copytrading (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coulor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cosmos-gradio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coolrama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in corlorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cordipy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coolbox (PyPI)
1 compromised version
Page 223 of 480