Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in code-tracker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin-codes-2022 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cobo-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in code-helper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in code-beautifyer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in coffin-codes-net (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in codeui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in code-suggester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in codefrequencychecker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in codeshouhu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in code-transfering-4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cmd2func (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloudfix (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloudx-base (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clowpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cnnct-eaas-corre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cmdb-worker-pckg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloudx-auth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cobo-custdy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloudscrapersafe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cobo-custdoy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloud-datasets (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloudauth-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloud-credentials (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clip-logger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clawdist (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clearsrc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clears (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ckanext-dms (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clearapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clicck (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clikc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cliick (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cirtum (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cipherflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in class-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ckr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clipcord (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clean-packager (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cloroma (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clolorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clickk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clistyling (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in claude-lite (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clawdest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chunqiuwestj-pkg-westj137 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in clcik (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ci-metadata-python-logging (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in check-codeowners (PyPI)
1 compromised version
Page 228 of 480