Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in cicd-ppe-redteam-test01 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cicibot-fix-message-naming (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cikit-learn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cipherbcrypto (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cick (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cipherbcryptors (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cicd-ppe-redteam-test02 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cicd-ppe-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cipherbcryptor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chatgpt4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in circleinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chatgpt-aitools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cittronn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cilorama (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chbencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in checkscrapeinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chalk-harness (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chimera-sandbox-extensions (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chat-prompt-logger (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in change-user-agent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chain-validator (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chromeselenium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chaostoolkit-turbulence (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chainutils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in christmasmiraclemaker (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cheezokdi10 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chat-xdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chalk-fancy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chia-pool-reference (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chosenrce18 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chrome-stealth (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chain00x (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chicopute (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chromifypro (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cfgmgr-sync (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cfgmgr-syn (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in celery-flower (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cephlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in centerprint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifiq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certufi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cert-orchestration-adapter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certiffi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in celery-routr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ceritfi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifiy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cffy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifii (PyPI)
1 compromised version
Page 229 of 480