Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,947 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in py-hydraurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hydracontrolcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpvisagui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hydragrandgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-infocvcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hydraadgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-inforandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hydrapost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hydraosinthydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-infopy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedultralgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedcccandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedkillcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedultratool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackednvidiarand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpgrandpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httppost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httprevisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedpushcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackednvidialib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpintelrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedpushtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedmaskvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedpongcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedgrandproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httppong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-guiurlkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedinfoproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedcandyhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httppull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedhttpstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpreplacerand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedosintlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedultraget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedccencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httphttpultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpedvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpaded (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-httpencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-hackedreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-grandstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-grandultralgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in py-getsplitvisa (PyPI)
1 compromised version
Page 120 of 479