Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqmaskcpuhacked (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmaskcpustring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmcget (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmccandypong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmaskad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmaskkillcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmchttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmaskcraftnvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqmced (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpippush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibadpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpullreplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpepgrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibcontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadcved (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadstringstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadpaypalad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadpippost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadurl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibtoolhttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadhackednvidia (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibcpued (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadrandsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibstrpost (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpushload (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibkillstr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadencodeosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqloadcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpaypalrandom (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibpiptool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlibcpuosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillpongrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqintstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqintstringcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillsplitpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqinttool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillram (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillproofcv (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlgtbguistr (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillurlcraft (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqkillinfocontrol (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqintcvgui (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqlgtbad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqintstudyhacked (PyPI)
1 compromised version
Page 203 of 480