Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqrandlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandompullmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandomhttpstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqrandloadcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramhydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramreplacestudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywrandomstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramlibed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywramultra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpyvmrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywlgtbnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywpepcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywponggui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywloadmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramed (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqramtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywlibencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywresplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpysuperinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpysplitrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywmchttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywrandomcc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywintelgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpywpongencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpymcpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpypingintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpymask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpyinted (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpycraftpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpygamevirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpyhydrarandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpyhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushpullmc (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpypaypalurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushpullreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushrehttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullpull (PyPI)
1 compromised version
Page 198 of 480