Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 18, 2025
Malicious code in solweb3 (npm)
- Mar 18, 2025
Malware in solweb3
1 compromised version
- Mar 18, 2025
Malicious code in sol-web3-utils (npm)
- Mar 18, 2025
Malware in sol-web3-utils
1 compromised version
- Mar 18, 2025
Malicious code in @theoretical123/providers (npm)
- Mar 18, 2025
Malware in @theoretical123/providers
1 compromised version
- Mar 18, 2025
Malicious code in @theoretical123/ssh2 (npm)
- Mar 18, 2025
Malicious code in @theoretical123/ethers (npm)
- Mar 18, 2025
Malware in @theoretical123/ssh2
1 compromised version
- Mar 18, 2025
Malware in @theoretical123/ethers
1 compromised version
- Mar 18, 2025
Malware in reproduction-hardhat
1 compromised version
- Mar 18, 2025
Malicious code in jupyter-optmwidgets (npm)
- Mar 18, 2025
Malware in jupyter-optmwidgets
1 compromised version
- Mar 18, 2025
Malicious code in gash (npm)
- Mar 18, 2025
Malware in gash
1 compromised version
- Mar 18, 2025
Malicious code in cortex-net-node (npm)
- Mar 18, 2025
Malicious code in cortex-app-utils (npm)
2 compromised versions
- Mar 18, 2025
Malware in cortex-app-utils
1 compromised version
- Mar 18, 2025
Malware in cortex-net-node
1 compromised version
- Mar 18, 2025
Malicious code in cortex-player-chromeoscortex (npm)
1 compromised version
- Mar 18, 2025
Malicious code in cortex-app-tutorial (npm)
1 compromised version
- Mar 18, 2025
Malware in cortex-app-tutorial
1 compromised version
- Mar 18, 2025
Malware in cortex-player-chromeoscortex
1 compromised version
- Mar 18, 2025
Malware in connector123
1 compromised version
- Mar 18, 2025
Malicious code in test111121112 (npm)
1 compromised version
- Mar 18, 2025
Malware in test111121112
1 compromised version
- Mar 18, 2025
Malicious code in vertex-core (npm)
1 compromised version
- Mar 18, 2025
Malicious code in threshold-usd (npm)
1 compromised version
- Mar 18, 2025
Malicious code in near-lake-raw-printer (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in near-crossword (npm)
- Mar 18, 2025
Malicious code in gatsby-starter-hello-world (npm)
- Mar 18, 2025
Malicious code in defi-handbook (npm)
1 compromised version
- Mar 18, 2025
Malicious code in com.unity.connect.share (npm)
- Mar 18, 2025
Malware in limit-order-validation
1 compromised version
- Mar 18, 2025
Malware in vertex-core
1 compromised version
- Mar 18, 2025
Malware in defi-handbook
1 compromised version
- Mar 18, 2025
Malware in my-amazing-app
1 compromised version
- Mar 18, 2025
Malware in threshold-usd
1 compromised version
- Mar 18, 2025
Malware in near-crossword
1 compromised version
- Mar 18, 2025
Malware in gatsby-starter-hello-world
1 compromised version
- Mar 18, 2025
Malware in actions-project-version-check
1 compromised version
- Mar 18, 2025
Malware in near-lake-raw-printer
1 compromised version
- Mar 18, 2025
Malware in com.unity.connect.share
1 compromised version
- Mar 18, 2025
Malicious code in sui-lending-protocol (npm)
1 compromised version
- Mar 18, 2025
Malicious code in picl-server (npm)
1 compromised version
- Mar 18, 2025
Malicious code in micropilot (npm)
1 compromised version
- Mar 18, 2025
Malicious code in com.github-glitchenzo.nugetforunity (npm)
1 compromised version
- Mar 18, 2025
Malware in picl-server
1 compromised version
- Mar 18, 2025
Malware in upload-testflight-action
1 compromised version
- Mar 18, 2025
Malware in micropilot
1 compromised version
Page 5927 of 6,634