Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqstringramgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrpepsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrpushsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringkillvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrmcgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrpushgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrproofint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringgetlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstrencodehacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringminecv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringpingpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringlgtbpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpushhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringgamere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringpepcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringpingcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitsplitver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrecpuvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringkillmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringcandypost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringcontrolstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitultrasuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqstringpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqresuper (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitosintmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywramint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpushpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpepcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpostint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywpoststudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreultramask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitmaskpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitosintint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplithttpmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrevmgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplithttphttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpepcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqresplitproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplithttposint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitguiram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrestrhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitpeptool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqsplitgrandvisa (PyPI)
1 compromised version
Page 196 of 480