Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,913 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tppullproofpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofgameed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullcpupull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullosintcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpprooftool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullproofurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullmaskinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpyproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullccre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpyad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullprooflib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullsuperhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofpinglib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushcpucandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullmcreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpostgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullhttpping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppullpipver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppushcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofmcultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofreplacereplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppoststringre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostreplacevisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppongvisapip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostrandomosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofcpuurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofpushram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostguistring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofpongint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostrandomsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpponglib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpposthttpvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofadpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostintsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostcandypong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppoststringcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostcandynvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tppostre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpproofpushkill (PyPI)
1 compromised version
Page 38 of 479