Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,953 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in hooktest1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hhxy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hive-setting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hsbcgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hooktest3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in honestjson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hive-os-settings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hmac2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hllm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hiveos-settings (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hiveos-setting (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hmacsync (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hidden-powershell-runner-ax7 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hkmat (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hooktest-fin (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hironobunigo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hnuhfyzumkmo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hoes (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hiveos-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexadec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdecnet (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helloharry123p (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdeci (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helmet-fastapi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in heroku-tl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellowpkg (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexadecpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdeclink (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellospa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdec (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexteamibm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexcolured (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helloharry123t-package (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helrmerter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellotesthim (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdecimal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexcon (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdecpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellopythopy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helmerter (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hexdecli (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hera-mapmaking-visibilitysimulation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hhonestjson (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellopythopyy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hex2pcap (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in helloharry123c (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-world-test-mh2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellohackers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-test-s1 (PyPI)
1 compromised version
Page 179 of 480