Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqpullstudyproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostintelcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullrandomsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullurlget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushhttpad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushadcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushccre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullosintpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpushmcstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullpushpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullhackedvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofrandommine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofpongint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofosintkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpongkillmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofinthydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofurlstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofsuperget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofgetosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofcandylgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofpushlib (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofpostvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofvisacandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullkillsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullinfoload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullcontrolint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpingvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofpostpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofproof (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullhackedstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullcraftlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpullcraftpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqproofloadpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpongram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpongpaypalnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostrandomstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpostrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqposthackedver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqpipstrvirtual (PyPI)
1 compromised version
Page 199 of 480