Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 17, 2025
Malicious code in linter-coffee-variables (npm)
1 compromised version
- Feb 17, 2025
Malicious code in zmcrypty (npm)
1 compromised version
- Feb 17, 2025
Malicious code in tesdf45454t (npm)
1 compromised version
- Feb 17, 2025
Malicious code in suvauxlib (npm)
1 compromised version
- Feb 17, 2025
Malicious code in keycloak-theme (npm)
1 compromised version
- Feb 17, 2025
Malicious code in voiceedgelite (npm)
18 compromised versions
- Feb 17, 2025
Malicious code in uyurettrtrtst (npm)
1 compromised version
- Feb 17, 2025
Malicious code in multirpc-sdk (npm)
3 compromised versions
- Feb 17, 2025
Malware in probit-test
1 compromised version
- Feb 17, 2025
Malware in probit-dev
1 compromised version
- Feb 17, 2025
Malware in toobit-internal
1 compromised version
- Feb 17, 2025
Malware in toobit-main
1 compromised version
- Feb 17, 2025
Malware in probit
1 compromised version
- Feb 17, 2025
Malware in probit-internal
1 compromised version
- Feb 17, 2025
Malware in probit-main
1 compromised version
- Feb 17, 2025
Malware in toobit-dev
1 compromised version
- Feb 17, 2025
Malware in toobit-test
1 compromised version
- Feb 17, 2025
Malware in ascendex
1 compromised version
- Feb 17, 2025
Malware in deepcoin-test
1 compromised version
- Feb 17, 2025
Malware in ascendex-main
1 compromised version
- Feb 17, 2025
Malware in deepcoin-internal
1 compromised version
- Feb 17, 2025
Malware in deepcoin-dev
1 compromised version
- Feb 17, 2025
Malware in ascendex-internal
1 compromised version
- Feb 17, 2025
Malware in deepcoin-main
1 compromised version
- Feb 17, 2025
Malware in deepcoin
1 compromised version
- Feb 17, 2025
Malware in ascendex-test
1 compromised version
- Feb 17, 2025
Malware in gemini-internal
1 compromised version
- Feb 17, 2025
Malware in gemini-main
1 compromised version
- Feb 17, 2025
Malware in gemini-dev
1 compromised version
- Feb 17, 2025
Malware in bitflyer-internal
1 compromised version
- Feb 17, 2025
Malware in bitflyer-test
1 compromised version
- Feb 17, 2025
Malware in bitflyer-dev
1 compromised version
- Feb 17, 2025
Malware in gemini-test
1 compromised version
- Feb 17, 2025
Malware in bitflyer-main
1 compromised version
- Feb 17, 2025
Malware in tokocrypto-main
1 compromised version
- Feb 17, 2025
Malware in tokocrypto-test
1 compromised version
- Feb 17, 2025
Malware in tokocrypto-internal
1 compromised version
- Feb 17, 2025
Malware in xt-dev
1 compromised version
- Feb 17, 2025
Malware in tokocrypto-dev
1 compromised version
- Feb 17, 2025
Malware in tokocrypto
1 compromised version
- Feb 17, 2025
Malware in bithumb-test
1 compromised version
- Feb 17, 2025
Malware in xt-main
1 compromised version
- Feb 17, 2025
Malware in xt-internal
1 compromised version
- Feb 17, 2025
Malicious code in lbank-test (npm)
- Feb 17, 2025
Malicious code in bitstamp-test (npm)
- Feb 17, 2025
Malicious code in bitstamp-main (npm)
- Feb 17, 2025
Malicious code in bitstamp-internal (npm)
- Feb 17, 2025
Malicious code in bitstamp-dev (npm)
- Feb 17, 2025
Malicious code in bithumb-main (npm)
- Feb 17, 2025
Malicious code in bithumb-internal (npm)
Page 5974 of 6,647