Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,929 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tpmcinfoping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmcpongpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadintvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskpaypalping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadreplacestring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadcraftint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadpingrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibvirtualstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskintelpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadkillping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskpepvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadpostosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskvisacontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmasklibsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskverultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskencodehacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadloadstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadguistring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadpulllgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskvisareplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskpaypalmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskpushre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadsplithacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskpullmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadloadosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskcontrolhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadgrandhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpmaskmcpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpkillhydraed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbencodecraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpliburlver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbmcultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tploadget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibtoolhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibcpuvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibhydrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbreosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplgtbgamestudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibsplithacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tplibpullpyw (PyPI)
1 compromised version
Page 42 of 479