Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in huangpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in humunculous591014 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydragame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huluquests (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hultine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hydenmj (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in huggingface-hubs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpx-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpx-advanced2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpx-advanced (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxv3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxmodifier (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxgetter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxhelp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxrequester (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxs (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpssus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxrequesterv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsyncer (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpx-utils (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxontop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxv2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpx-advanced3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpwindex (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpxboost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsus (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httptool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsreqfast (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpscolor (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsmovements (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsing (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpssp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpserver-cache (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httprequesting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpuri (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsrequestsfast (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpsuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httprequesthub (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httptes232 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpnvidia (PyPI)
1 compromised version
Page 177 of 480