Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,951 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in libhydraint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydraedstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydravmmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydravmram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libideeee (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libidee (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libid (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydracvnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydrasupercpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydraminepyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydraregame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydracandymask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libideee (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libida (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libidi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttppostcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydracraftrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libidos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydrastrpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydrapong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydravered (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttppostpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydrareplacere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydrapongstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttppip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhydratooled (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedlgtbrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedloadtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpliburl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedosintvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttposintgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedhackedgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libguivmcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libguivisastring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttphttpcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpadrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpcvurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedpullload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttphydraget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttplgtbtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhmac (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedkillcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedpullpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhttpintelstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedstrreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedgamecpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in libhackedpepreplace (PyPI)
1 compromised version
Page 164 of 480