Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in ilovemadpussy9 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ibmodules (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ighack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iamenumerat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in igtpython (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in iaohttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in icloud-recovery (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in ilovenyxxbait (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hypixel-networth-api (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hyperreq (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hyperon-das-atomdb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrainfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrastr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydralib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrahttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrastudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydramine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hyper-request (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydravirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrahydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydramask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydratool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrapyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hypedrop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrapaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydrapep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydravisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in humunculous5910145 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hugchats (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hugginglega (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hybrid-sd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huzzleup (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huggingleg2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in humunculous59101 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hy-api-utilities (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hubtik (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hxq-misc-utils-0379 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huzzleuo130 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydraget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huggingleg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydragui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in humunaiodio2443 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huggingfaces-hub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huggingprocessor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in humunculous5910 (PyPI)
1 compromised version
Page 176 of 480