Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 13, 2025
Malware in fontsource
1 compromised version
- Feb 13, 2025
Malware in pmmmwh
1 compromised version
- Feb 13, 2025
Malicious code in rainhq (npm)
1 compromised version
- Feb 13, 2025
Malicious code in panter (npm)
- Feb 13, 2025
Malicious code in osae (npm)
- Feb 13, 2025
Malicious code in jbrowse (npm)
- Feb 13, 2025
Malicious code in heytap (npm)
1 compromised version
- Feb 13, 2025
Malicious code in genesys-richmedia (npm)
2 compromised versions
- Feb 13, 2025
Malware in panter
1 compromised version
- Feb 13, 2025
Malware in rainhq
1 compromised version
- Feb 13, 2025
Malware in osae
1 compromised version
- Feb 13, 2025
Malware in heytap
1 compromised version
- Feb 13, 2025
Malware in jbrowse
1 compromised version
- Feb 13, 2025
Malware in genesys-richmedia
1 compromised version
- Feb 13, 2025
Malicious code in prettyphoto (npm)
1 compromised version
- Feb 13, 2025
Malicious code in assisted-chat (npm)
3 compromised versions
- Feb 13, 2025
Malware in prettyphoto
1 compromised version
- Feb 13, 2025
Malware in assisted-chat
1 compromised version
- Feb 13, 2025
Malicious code in holahackerone (npm)
2 compromised versions
- Feb 13, 2025
Malware in holahackerone
1 compromised version
- Feb 13, 2025
Malware in dummy-loosesight-gd
1 compromised version
- Feb 13, 2025
Malware in dummy-loosesight-gc
1 compromised version
- Feb 13, 2025
Malicious code in telegramclient-sdk (npm)
1 compromised version
- Feb 13, 2025
Malicious code in node-tg-bot-api (npm)
- Feb 13, 2025
Malicious code in grammyjs-sdk (npm)
- Feb 13, 2025
Malware in telegramclient-sdk
1 compromised version
- Feb 13, 2025
Malware in node-tg-bot-api
1 compromised version
- Feb 13, 2025
Malware in grammyjs-sdk
1 compromised version
- Feb 13, 2025
Malicious code in solana-web3.js (npm)
1 compromised version
- Feb 13, 2025
Malicious code in node-tg-bot-sdk (npm)
- Feb 13, 2025
Malware in solana-web3.js
1 compromised version
- Feb 13, 2025
Malware in node-tg-bot-sdk
1 compromised version
- Feb 13, 2025
Malware in hardhat-configs
1 compromised version
- Feb 13, 2025
Malware in grammyjs-utils
1 compromised version
- Feb 13, 2025
Malware in telegramclient-utils
1 compromised version
- Feb 13, 2025
Malware in victory-native-xl-monorepo
1 compromised version
- Feb 13, 2025
Malicious code in tenable-universal-layout (npm)
- Feb 13, 2025
Malware in tenable-universal-layout
1 compromised version
- Feb 13, 2025
Malware in marked-as
1 compromised version
- Feb 13, 2025
Malware in marked-at
1 compromised version
- Feb 13, 2025
Malware in node-telegram-sdk
1 compromised version
- Feb 13, 2025
Malware in node-telegram-bot-sdk
1 compromised version
- Feb 13, 2025
Malware in telegram-util
1 compromised version
- Feb 13, 2025
Malware in grammy-utils
1 compromised version
- Feb 13, 2025
Malicious code in openbet-player-api-sdk (npm)
- Feb 13, 2025
Malware in openbet-access-controller
1 compromised version
- Feb 13, 2025
Malware in openbet-player-api-sdk
1 compromised version
- Feb 13, 2025
Malicious code in uzx-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in uzx-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in uzx-internal (npm)
1 compromised version
Page 5979 of 6,647