Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in coolpackage2323 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cookiesjar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cosmos-cuda (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coolstyle (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coreloader (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cpan (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in corutil (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in core-roblox-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coremsft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controltool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlnot-aux (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controllib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in controlcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in connections-api-hidden-runner (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in connector-bsb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in confighum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in companyx-metaflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in consolergbcolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in conio (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in computestpspeedcompcomp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in compresai (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in connections-api-request (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in conda-package-handling111 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in conn-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in compilecls (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in console-logs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in compressi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in connection-api-requests (PyPI)
1 compromised version
Page 224 of 480