Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,907 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tppylgtbnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyproofpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppypip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywccultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushstudylgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyhydraurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyosintrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppymask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyreplacestr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppylgtbreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppypiplgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyrandomed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyinfoinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppypingvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyintgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyliblgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywcraftcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushverpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywproofcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppykillkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywloadhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppywintelgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppygetrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyencodepull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppycpurand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushpushre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyhttprand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushmaskpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushvmgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushgrandcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushcraftcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushpingpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushhackedint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushpephttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushlibpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppyinfocandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullreplacehttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofsplitcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullproofpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofgameed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullcpupull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullosintcv (PyPI)
1 compromised version
Page 37 of 479