Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 15, 2026
Malware in dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip
1 compromised version
- May 15, 2026
Malware in dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu
1 compromised version
- May 15, 2026
Malware in dowload_ebok_como_leer_el_futbol_by_ruud_gullit_8qd97
1 compromised version
- May 15, 2026
Malicious code in marathon-assets (npm)
- May 15, 2026
Malicious code in jenkins-forge-utils (npm)
- May 15, 2026
Malicious code in jenkins-forge-app (npm)
- May 15, 2026
Malicious code in jenkins-for-jira (npm)
5 compromised versions
- May 15, 2026
Malicious code in browser-interaction-time-utils (npm)
- May 15, 2026
Malicious code in browser-interaction-time-demo (npm)
- May 15, 2026
Malicious code in atlassian-marathon-asset-pipeline (npm)
- May 15, 2026
Malicious code in atlassian-jenkins-helper-utils (npm)
- May 15, 2026
Malware in jenkins-forge-app
1 compromised version
- May 15, 2026
Malware in marathon-assets
1 compromised version
- May 15, 2026
Malware in atlassian-jenkins-helper-utils
1 compromised version
- May 15, 2026
Malware in atlassian-marathon-asset-pipeline
1 compromised version
- May 15, 2026
Malware in browser-interaction-time-demo
1 compromised version
- May 15, 2026
Malware in jenkins-for-jira
1 compromised version
- May 15, 2026
Malware in jenkins-forge-utils
1 compromised version
- May 15, 2026
Malware in browser-interaction-time-utils
1 compromised version
- May 15, 2026
Malicious code in simple-date-diff-utils (npm)
- May 15, 2026
Malicious code in json-pretty-logs (npm)
- May 15, 2026
Malicious code in babel-6-compatibility-utils (npm)
- May 15, 2026
Malicious code in babel-6-compatibility (npm)
- May 15, 2026
Malware in simple-date-diff-utils
1 compromised version
- May 15, 2026
Malware in babel-6-compatibility-utils
1 compromised version
- May 15, 2026
Malware in babel-6-compatibility
1 compromised version
- May 15, 2026
Malware in json-pretty-logs
1 compromised version
- May 15, 2026
Malicious code in frank-at-alibaba-internal (npm)
5 compromised versions
- May 15, 2026
Malicious code in aliyun-internal-config (npm)
1 compromised version
- May 15, 2026
Malicious code in alicloud-pop-core (npm)
- May 15, 2026
Malware in apple-infra-ultimate-bypass
1 compromised version
- May 15, 2026
Malware in apple-infra-gcp-leak
1 compromised version
- May 15, 2026
Malware in apple-internal-pki-utils
1 compromised version
- May 15, 2026
Malware in apple-infra-final-escape
1 compromised version
- May 15, 2026
Malware in apple-internal-auth-v3
1 compromised version
- May 15, 2026
Malware in apple-internal-dev-check
1 compromised version
- May 15, 2026
Malware in alicloud-pop-core
1 compromised version
- May 15, 2026
Malware in apple-internal-pki-trust
1 compromised version
- May 15, 2026
Malware in frank-at-alibaba-internal
1 compromised version
- May 15, 2026
Malware in apple-coredata-internal-service
1 compromised version
- May 15, 2026
Malware in apple-cloud-infrastructure-monitor
1 compromised version
- May 15, 2026
Malware in apple-internal-telemetry-service
1 compromised version
- May 15, 2026
Malware in apple-security-internal-scanner-v3
1 compromised version
- May 15, 2026
Malware in apple-cktool-api-v2
1 compromised version
- May 15, 2026
Malware in apple-internal-pki-trust-v5
1 compromised version
- May 15, 2026
Malware in apple-pki-cert-validator
1 compromised version
- May 15, 2026
Malware in agents-a365-runtime
1 compromised version
- May 15, 2026
Malware in aliyun-internal-config
1 compromised version
- May 15, 2026
Malware in npm-global-util
1 compromised version
- May 15, 2026
Malware in apple-infra-network-v2
1 compromised version
Page 103 of 4,804