Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,922 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tpvirtualcontrolmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverloadget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverencodeinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurllib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurled (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverloadgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlmcstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvercpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvercpuencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverguipost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverloadtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpverurllgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvervmsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpvirtualcontrolcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurlstudyre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultravmvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultrapullrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultravmpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultralgtbcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpurladpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultraintelcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultrarandpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperurlload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperosintmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperultramc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolstringpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultragamerandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperpongultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolurlgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultragui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsupercpuintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultraintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsupergame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoollgtbhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsupermcmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolminelib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpultraencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolvisaver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolintelram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolvmpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tptoolcpusplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpsuperproofpost (PyPI)
1 compromised version
Page 33 of 479