Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqrepullstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrerecandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepymc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacegame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplaceguistudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacegrandpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplaceedlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrekillintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreinfore (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrehydraencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrecv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqregame (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepushvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacegrandpyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepyvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacerandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrere (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacepaypalstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrenvidiaad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacemaskcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqregrandinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplaceurlre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrepyw (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacepywcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrehttpinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqreplacepull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandompullad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandultrare (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandmaskpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandompingad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomurlhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandompushgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandadget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandominfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandominfopip (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomreplacecc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandpippush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrecandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomhydrainfo (PyPI)
1 compromised version
Page 197 of 480