Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in httppost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httppep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httphacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httppip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httplat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httphttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httppyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httplgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpprobe (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httphydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httppack (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpniggerblackcocksontopfr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpgame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-interact (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpgayasfunigga (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http3-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-query (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httiop (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http3clientpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in htps1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpfluent (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpacc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpgayasfuniggahajewm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httpad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in htties (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-request-toolkit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-request-query (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-notifier-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http-xen (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in httops (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in http3client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in horde-python-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in home-robot (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hpe-glcp-automation-lib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hooktest2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hiveos (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hlokty (PyPI)
1 compromised version
Page 178 of 480