Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tlask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tommygtst (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tlsproxies (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tls-bypass (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tobihook (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkinnter2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tomproxies (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tlsclient3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tonki (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toneo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tls-python (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tlsclient-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tls-client-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkintrs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolbelt-requests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tokenapiv4 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tktoken (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tnesorflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkclaendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkinnter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkkcalendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tokenpath (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tnsorflow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tlsshield (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tokyo-ppe-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tomli-dzw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in toolcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tlibrium (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tonetext (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tonvia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tns-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalednar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcaledar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalenadr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkccalendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalenndar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalenar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalendra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalenddar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalnedar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalendarr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalendr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcaleendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcallendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalenda (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcalendaar (PyPI)
1 compromised version
Page 50 of 479