Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
23,961 total in pypi · sorted newest first- Jul 21, 2026
Malicious code in esqcpucandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcpucrafturl (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcpucontrolmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcpucpure (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolad (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolintintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcpucraftstudy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccstring (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolhttphttp (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolhackedvm (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcontrolhttppaypal (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccstringlgtb (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccstringmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccre (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpygrand (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandysplitpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyosintcandy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccencode (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyadvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpostmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandysplitpull (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccguihydra (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccminepy (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccinfo (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpongcpu (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpullpush (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyosint (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandypyvisa (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyosintsplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadvmpong (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccreplaceintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandygrandtool (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccping (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpep (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccpullvirtual (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandyreplacereplace (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqcandypongmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqccmask (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadrandomver (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in envtoolsx (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadpostmine (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadpeped (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadkill (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadintel (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadvisasplit (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in erquests-toolbelt (PyPI)
1 compromised version
- Jul 21, 2026
Malicious code in esqadpostver (PyPI)
1 compromised version
Page 209 of 480