Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,929 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tpedhydrapush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpedultraintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpencodesplitpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpedstringad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvverencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvultrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvpygui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpencodepywget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpencodevirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpencodepepmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpedinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpednvidiakill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftlgtbload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftloadpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpulgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftcraftencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvpipgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpugetping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpuencodecc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvnvidiasuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvhydrastring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftpeplib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpumcsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvadgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvgrandhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpustrvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftinfonvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcved (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftcandypyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpuramhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcrafthydracandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvmcpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpuintcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpupeppaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpuintpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpupingreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcpuedosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvadlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcraftvisasuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcvhackedgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpccintelcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcontrolhttpcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcontrolvmpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcontrolpipint (PyPI)
1 compromised version
Page 47 of 479