Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in cffi-curl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ceiec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifij (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in certifications (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in celium-collateral-upgrade (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in chacha-lite-encrypt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cflashfiles (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cffii (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cctool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccxxt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccxt-bullish (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccxt-telemetry (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccxtt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cclick (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cccxt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cdf-clients (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccxt-mexc-futures (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccsinstaller (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cdms2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccryptocompare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccryptofeed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cckill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cclgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccl-localstoragerss (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cblines (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccl-leveldbases (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cchttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccl-leveldbase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in cchydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccl-localstoragers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ccgame (PyPI)
1 compromised version
Page 230 of 480