Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,541 total · sorted newest first- Nov 8, 2026
Malware in @htooayelwinict/travis234
1 compromised version
- Nov 8, 2026
Malicious code in twitch-stream-py (PyPI)
1 compromised version
- Nov 8, 2026
Malicious code in pyuserfox (PyPI)
1 compromised version
- Nov 8, 2026
Malicious code in pyuserox (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in twitch-stream-py (PyPI)
12 compromised versions
- Nov 7, 2026
Malicious code in pyuserox (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in pyuserfox (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in gcp-log-poc (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in gcp-log-poc (PyPI)
3 compromised versions
- Nov 7, 2026
Malicious code in qzc690384 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690384 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690385 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690382 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690383 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690383 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690382 (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in qzc690385 (PyPI)
14 compromised versions
- Nov 7, 2026
Malicious code in pulumi-doppler (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in genblaze-atlascloud (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in genblaze-fal (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in genblaze-atlascloud (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in genblaze-fal (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in dsh-notify-focus (npm)
3 compromised versions
- Nov 7, 2026
Malware in dsh-notify-focus
1 compromised version
- Nov 7, 2026
Malicious code in pulumi-doppler (PyPI)
2 compromised versions
- Nov 7, 2026
Malicious code in reqnest (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in reqnests (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in fhqiouhq (PyPI)
1 compromised version
- Nov 7, 2026
Malicious code in ajfhiuqhfqgwerhuqnfqh (PyPI)
1 compromised version
- Nov 6, 2026
Malicious code in @cherrydotfun/miniapp-sdk (npm)
2 compromised versions
- Nov 6, 2026
Malware in @cherrydotfun/miniapp-sdk
1 compromised version
- Nov 6, 2026
Malicious code in fhqiouhq (PyPI)
1 compromised version
- Nov 6, 2026
Malicious code in ajfhiuqhfqgwerhuqnfqh (PyPI)
1 compromised version
- Nov 6, 2026
Malicious code in reqnests (PyPI)
2 compromised versions
- Nov 6, 2026
Malicious code in reqnest (PyPI)
1 compromised version
- Nov 6, 2026
Malicious code in hello-bat-fwi9 (PyPI)
1 compromised version
- Nov 6, 2026
Malicious code in tailwind-animationfound (npm)
- Nov 6, 2026
Malware in tailwind-animationfound
1 compromised version
- Nov 6, 2026
Malicious code in modelsdesk (npm)
1 compromised version
- Nov 6, 2026
Malware in modelsdesk
1 compromised version
- Nov 6, 2026
Malicious code in kampodine (npm)
1 compromised version
- Nov 6, 2026
Malware in kampodine
1 compromised version
- Nov 6, 2026
Malicious code in automic-style-engine (npm)
- Nov 6, 2026
Malware in automic-style-engine
1 compromised version
- Nov 6, 2026
Malicious code in hello-bat-fwi9 (PyPI)
2 compromised versions
- Nov 6, 2026
Malicious code in monopw (npm)
- Nov 6, 2026
Malicious code in monobomber (npm)
- Nov 6, 2026
Malware in monobomber
1 compromised version
- Nov 6, 2026
Malware in monopw
1 compromised version
- Nov 6, 2026
Malicious code in tw-motion-css (npm)
Page 1 of 7,311