Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
363,089 total · sorted newest first- Oct 7, 2026
Malware in waie-crash-baileys
1 compromised version
- Oct 7, 2026
Malicious code in store-webpack-config (npm)
1 compromised version
- Oct 7, 2026
Malicious code in browser-metrics-plugin.contrib (npm)
1 compromised version
- Oct 7, 2026
Malicious code in personio-pipeline-projen (npm)
1 compromised version
- Oct 7, 2026
Malicious code in windows_registry_editor (npm)
1 compromised version
- Oct 7, 2026
Malicious code in troubleshooting (npm)
1 compromised version
- Oct 7, 2026
Malicious code in lore-cs (PyPI)
1 compromised version
- Oct 6, 2026
Malicious code in css-jptvix-polyfill (npm)
1 compromised version
- Oct 6, 2026
Malicious code in lore-cs (PyPI)
1 compromised version
- Oct 6, 2026
Malware in @kxa/xbails
1 compromised version
- Oct 6, 2026
Malicious code in captchetat-angularv8 (npm)
- Oct 6, 2026
Malware in captchetat-angularv8
1 compromised version
- Oct 6, 2026
Malicious code in hardhat-init (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v30 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in @pinecone-experience/messages (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v875 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v23 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v86 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in hardhat-init (npm)
1 compromised version
- Oct 6, 2026
Malicious code in @badzz88/baileys (npm)
9 compromised versions
- Oct 6, 2026
Malicious code in internallib_v23 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in @pinecone-experience/messages (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v30 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v86 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in internallib_v875 (npm)
1 compromised version
- Oct 6, 2026
Malicious code in virgil-cli (npm)
1 compromised version
- Oct 6, 2026
Malicious code in zencleaner (PyPI)
1 compromised version
- Oct 6, 2026
Malware in dotenv-async
1 compromised version
- Oct 5, 2026
Malicious code in erc7730-hackathon (PyPI)
1 compromised version
- Oct 5, 2026
Malicious code in erc7730-hackathon (PyPI)
1 compromised version
- Oct 5, 2026
Malware in @inpeek/odata-angular
1 compromised version
- Oct 5, 2026
Malware in @inpeek/odata
1 compromised version
- Oct 5, 2026
Malicious code in bitcoin-rpc-lite (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lightinng-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in solaan-ruby (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in ligbtning-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in wallet-crypto-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in etheremu.rb (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lightning-invoice-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in hdkey-derive-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crypto-mnemonic-tools (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crypti-toolbox (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in tron-rb (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in tx-broadcast-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lighthing-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crylto-toolbox (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in ethereum-tx-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in wallet-backup-tool (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in blockchain-sync-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in kecack (RubyGems)
1 compromised version
Page 1 of 7,262