Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,933 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in tkcalndar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tingetone (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timestamp-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcp-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timesmcplib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcaendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timenow (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timekeeper-verifier (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timingmcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timermcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timesmcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in titan-osint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkaclendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkalendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timermcplib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tjajsd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timenow-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcaalendar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcplib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in titifel-pypi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tinkoff-cloud-apis-internal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcp-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tkcaelndar (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcp190825790125120985125 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timsingapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in titifel-pyip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timemcp-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiktoken-mcp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tikweb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in thisismytest123 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in thisismytestnouser (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in threading-assistant (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in time-server-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in thoughtspot-rest-api-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in threads4images (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in time-server-analysis (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiktokthon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in thisisthedaventest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timekeeper-verif1er (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiktok5 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiktok8 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tikinters (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in time-check-server (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in threadscount (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiksing (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiktok6 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in timeextral-advanced-8d2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in tiketoken (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in threadlimite (PyPI)
1 compromised version
Page 51 of 479