Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
330,055 total · sorted newest first- Sep 12, 2026
Malicious code in python-fork (PyPI)
1 compromised version
- Sep 12, 2026
Malicious code in python-fork (PyPI)
2 compromised versions
- Sep 12, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 12, 2026
Malicious code in tailwind-form-kit (npm)
1 compromised version
- Sep 12, 2026
Malicious code in cr-bot-common (npm)
1 compromised version
- Sep 12, 2026
Malicious code in greensaver (npm)
1 compromised version
- Sep 12, 2026
Malicious code in tracker-cloudflare (npm)
1 compromised version
- Sep 11, 2026
Malicious code in platform-telemetry-client (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in greensaver (npm)
3 compromised versions
- Sep 11, 2026
Malicious code in cr-bot-common (npm)
1 compromised version
- Sep 11, 2026
Malicious code in tailwind-form-kit (npm)
1 compromised version
- Sep 11, 2026
Malicious code in tracker-cloudflare (npm)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in langgrap (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in transfomers (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in ollamaa (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in openaii (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextutils-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in @nimbusedge/auth (npm)
1 compromised version
- Sep 11, 2026
Malicious code in aitextkit-py (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in @nimbusedge/auth (npm)
40 compromised versions
- Sep 11, 2026
Malware in tailwind-form-kit
1 compromised version
- Sep 11, 2026
Malicious code in eth-account-web3 (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in pymem-win (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in web3-eth-account (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in aitextutils-py (PyPI)
2 compromised versions
- Sep 11, 2026
Malicious code in aitextkit-py (PyPI)
2 compromised versions
- Sep 11, 2026
Malicious code in pymem-win (PyPI)
5 compromised versions
- Sep 11, 2026
Malicious code in eth-account-web3 (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in web3-eth-account (PyPI)
1 compromised version
- Sep 11, 2026
Malicious code in strapi-plugin-vinsoc-1109 (npm)
1 compromised version
- Sep 11, 2026
Malicious code in strapi-plugin-vinsoc-1109 (npm)
1 compromised version
- Sep 11, 2026
Malware in daytona-test-npm
1 compromised version
- Sep 11, 2026
Malware in daytona-test-filereader
1 compromised version
- Sep 11, 2026
Malware in daytona-test-miner
1 compromised version
- Sep 10, 2026
Malware in cat-sis2go-utils
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-test
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-isolation
1 compromised version
- Sep 10, 2026
Malware in @yongot/canary-mcp-test-2
1 compromised version
- Sep 10, 2026
Malicious code in lucy-python-script-2030 (PyPI)
1 compromised version
- Sep 10, 2026
Malicious code in lucy-python-script-2030 (PyPI)
2 compromised versions
- Sep 10, 2026
Malicious code in tailwindcss-contact-forms (npm)
1 compromised version
- Sep 10, 2026
Malicious code in pinochiomathm (npm)
1 compromised version
- Sep 10, 2026
Malicious code in pinochiomathm (npm)
4 compromised versions
- Sep 10, 2026
Malicious code in tailwindcss-contact-forms (npm)
8 compromised versions
- Sep 10, 2026
Malware in tailwindcss-contact-forms
1 compromised version
- Sep 10, 2026
Malicious code in far-cyan-mite (npm)
1 compromised version
Page 1 of 6,602