Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,922 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tpvisaosintpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmpostsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisapull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmcraftmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in treeherder-submitter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmstringgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmintget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisaram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmhydragrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmpushhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisapostping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvminfopep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisasplitram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in transaction-analyze (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmguiultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in transitive-req (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in treadtools (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmpipsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisaosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvmcpustudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in trainers-cooks (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisapyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisaintelint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisaguipost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualstudyproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualpulltool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualramget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualpywproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualintelmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtuallgtbpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisahydracpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualpullvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisalgtbcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisaencodegrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualcontrolpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvisainfointel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverpygame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlpaypalcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlhackedver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvercontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlpullpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlguiint (PyPI)
1 compromised version
Page 32 of 479