Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 17, 2025
Malware in yizhifabao59
1 compromised version
- Feb 17, 2025
Malware in yizhifabao60
1 compromised version
- Feb 17, 2025
Malware in yizhifabao61
1 compromised version
- Feb 17, 2025
Malicious code in yizhifabao58 (npm)
- Feb 17, 2025
Malicious code in yizhifabao57 (npm)
- Feb 17, 2025
Malicious code in yizhifabao56 (npm)
- Feb 17, 2025
Malicious code in yizhifabao55 (npm)
- Feb 17, 2025
Malicious code in tbasdzqdl55 (npm)
- Feb 17, 2025
Malware in tbasdzqdl55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao57
1 compromised version
- Feb 17, 2025
Malware in yizhifabao58
1 compromised version
- Feb 17, 2025
Malware in 52471254zqdl55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao56
1 compromised version
- Feb 17, 2025
Malicious code in telegram-bots (npm)
- Feb 17, 2025
Malicious code in telegram-bot-hoster3 (npm)
- Feb 17, 2025
Malware in telegram-bot-hoster3
1 compromised version
- Feb 17, 2025
Malware in telegram-bots
1 compromised version
- Feb 17, 2025
Malicious code in telegram-bot-hoster2 (npm)
- Feb 17, 2025
Malicious code in telegram-bot-hoster (npm)
- Feb 17, 2025
Malicious code in telegram-bot-host (npm)
- Feb 17, 2025
Malicious code in telegram-bo-host (npm)
- Feb 17, 2025
Malware in telegram-bot-hoster2
1 compromised version
- Feb 17, 2025
Malware in telegram-bo-host
1 compromised version
- Feb 17, 2025
Malware in telegram-bot-host
1 compromised version
- Feb 17, 2025
Malware in telegram-bot-hoster
1 compromised version
- Feb 17, 2025
Malicious code in electron-dependency-confusion-window (npm)
- Feb 17, 2025
Malware in electron-dependency-confusion-window
1 compromised version
- Feb 17, 2025
Malicious code in rust-analyzer (npm)
1 compromised version
- Feb 14, 2025
Malware in xeno.dll
1 compromised version
- Feb 14, 2025
Malware in solaraexecutor
1 compromised version
- Feb 13, 2025
Malicious code in dzengi (npm)
- Feb 13, 2025
Malware in dzengi
1 compromised version
- Feb 13, 2025
Malicious code in vidio-kmm (npm)
2 compromised versions
- Feb 13, 2025
Malware in vidio-kmm
1 compromised version
- Feb 13, 2025
Malware in sigma-payment
1 compromised version
- Feb 13, 2025
Malware in blynk-ide
1 compromised version
- Feb 13, 2025
Malware in bloomr-ts
1 compromised version
- Feb 13, 2025
Malware in swift-login-api
1 compromised version
- Feb 13, 2025
Malware in ibm.github.io
1 compromised version
- Feb 13, 2025
Malicious code in ts-plugin-file-path-support (npm)
1 compromised version
- Feb 13, 2025
Malicious code in pages-e2e (npm)
2 compromised versions
- Feb 13, 2025
Malicious code in orange-meets (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gestalt-docs (npm)
1 compromised version
- Feb 13, 2025
Malware in orange-meets
1 compromised version
- Feb 13, 2025
Malware in gestalt-docs
1 compromised version
- Feb 13, 2025
Malware in ts-plugin-file-path-support
1 compromised version
- Feb 13, 2025
Malware in pages-e2e
1 compromised version
- Feb 13, 2025
Malicious code in pmmmwh (npm)
- Feb 13, 2025
Malicious code in fontsource (npm)
Page 5978 of 6,647