Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tpadmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in totohateinenkleinencock (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcandycontrolpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadtoolmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tosa-serialization-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcandycc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadramload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadrandommc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadvmpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in torhc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadgrandrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpadrandcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tpcandylgtbgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tooltool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tooled (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toorc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in torchao-nightly (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in torahbiblecodes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in torchflow-experimental (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toollgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkclendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolcandy (PyPI)
1 compromised version
Page 49 of 479