Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,956 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in hello-world-test-mh2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellohackers (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-test-s1 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-world-installer-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-wordl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hellodista (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hekamhelp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-world-package-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-from-shiphero (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-world-test-mh3 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-bozzo2 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hell-cipher (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hello-dynamic (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hashdecrypts (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hashtools32 (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hawzebisdzazf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hash-utils-py (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hazard (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hardixx-code (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in haqawi (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hase (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hashdecrypt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in heimdal-credentials (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in haproxy-config-client (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hashstation (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hashidf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in handyfiles (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hamburgesr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hamurico (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hahabott (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hahahasillyxd (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hairest (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hamubika (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hacktool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hancsv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hangimani (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackmiami (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in habboapps (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackling (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackerone-app-sdk (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackednvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in habitmf (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hack-test (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in habbocls (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in hackedintel (PyPI)
1 compromised version
Page 180 of 480