Published on July 17, 2026, the notice says that setting UV_MALWARE_CHECK=1 enables an OSV database check before installing packages from remote registries.
Published on July 17, 2026, the notice describes a malware check in uv: setting UV_MALWARE_CHECK=1 makes the tool query the OSV database before installing packages from a remote registry. Packages reported as malware are blocked.
The change adds a check before installation and applies to packages from remote registries. To confirm the behavior and scope, consult the original notice and the uv and OSV documentation. If you use AI to study or apply the setting, do not include credentials or internal organizational data in the prompt.