Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 4, 2025
Malware in bm_pinterest
1 compromised version
- Mar 4, 2025
Malicious code in serum-anchor-wallet (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in raydium-sdk-liquidity-init (npm)
- Mar 4, 2025
Malicious code in gas-fee-saver (npm)
- Mar 4, 2025
Malicious code in cors_error_preventor (npm)
- Mar 4, 2025
Malware in cors_error_preventor
1 compromised version
- Mar 4, 2025
Malware in raydium-sdk-liquidity-init
1 compromised version
- Mar 4, 2025
Malware in serum-anchor-wallet
1 compromised version
- Mar 4, 2025
Malware in gas-fee-saver
1 compromised version
- Mar 4, 2025
Malicious code in upbit-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-production (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-internal (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget (npm)
1 compromised version
- Mar 4, 2025
Malware in bitget-internal
1 compromised version
- Mar 4, 2025
Malware in bitget
1 compromised version
- Mar 4, 2025
Malware in bitget-main
1 compromised version
- Mar 4, 2025
Malware in upbit-production
1 compromised version
- Mar 4, 2025
Malware in upbit-main
1 compromised version
- Mar 4, 2025
Malware in upbit-dev
1 compromised version
- Mar 4, 2025
Malware in upbit-test
1 compromised version
- Mar 4, 2025
Malware in bitget-dev
1 compromised version
- Mar 4, 2025
Malicious code in upbit-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in upbit-internal
1 compromised version
- Mar 4, 2025
Malicious code in latoken-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in hashkey-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in latoken-main
1 compromised version
- Mar 4, 2025
Malware in hashkey-internal
1 compromised version
- Mar 4, 2025
Malware in latoken-test
1 compromised version
- Mar 4, 2025
Malware in latoken-dev
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-internal (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in whitebit-dev
1 compromised version
- Mar 4, 2025
Malware in latoken-internal
1 compromised version
- Mar 4, 2025
Malware in whitebit-test
1 compromised version
- Mar 4, 2025
Malware in whitebit-main
1 compromised version
- Mar 4, 2025
Malware in whitebit-internal
1 compromised version
- Mar 4, 2025
Malware in whitebit
1 compromised version
- Mar 4, 2025
Malicious code in connector123 (npm)
1 compromised version
- Mar 4, 2025
Malicious code in web3-2-alpha (npm)
1 compromised version
- Mar 4, 2025
Malicious code in safe-backend-integration (npm)
Page 5944 of 6,634