Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,265 total in npm · sorted newest first- Jun 3, 2024
Malicious code in random-avishek (npm)
- Jun 3, 2024
Malware in win66lib
1 compromised version
- Jun 3, 2024
Malware in test-lib-avishek
1 compromised version
- Jun 3, 2024
Malware in winextracter
1 compromised version
- Jun 3, 2024
Malware in testone-avisheknayal
1 compromised version
- Jun 3, 2024
Malware in random-avishek
1 compromised version
- Jun 3, 2024
Malicious code in pkg-lumina-test (npm)
- Jun 3, 2024
Malicious code in package-delete (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal122 (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal1 (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal (npm)
- Jun 3, 2024
Malicious code in developer-integrity2 (npm)
- Jun 3, 2024
Malicious code in developer-integrity1 (npm)
- Jun 3, 2024
Malware in developer-integrity2
1 compromised version
- Jun 3, 2024
Malware in developer-integrity1
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal1
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal122
1 compromised version
- Jun 3, 2024
Malware in package-delete
1 compromised version
- Jun 3, 2024
Malware in pkg-lumina-test
1 compromised version
- Jun 3, 2024
Malicious code in developer-integrity-avishek (npm)
- Jun 3, 2024
Malicious code in demotestsomple (npm)
- Jun 3, 2024
Malicious code in demotestsample (npm)
- Jun 3, 2024
Malicious code in demo-sridharrr (npm)
- Jun 3, 2024
Malicious code in demo-sridhar.com (npm)
- Jun 3, 2024
Malicious code in dematestsample (npm)
- Jun 3, 2024
Malware in demo-sridharrr
1 compromised version
- Jun 3, 2024
Malware in developer-integrity-avishek
1 compromised version
- Jun 3, 2024
Malware in demo-sridhar.com
1 compromised version
- Jun 3, 2024
Malware in demotestsomple
1 compromised version
- Jun 3, 2024
Malware in demotestsample
1 compromised version
- Jun 3, 2024
Malware in dematestsample
1 compromised version
- Jun 3, 2024
Malicious code in command-injection-avi (npm)
- Jun 3, 2024
Malicious code in calculator-avishek (npm)
- Jun 3, 2024
Malicious code in @juiggitea/voluptates-illum-consequatur (npm)
- Jun 3, 2024
Malicious code in @juiggitea/voluptatem-quos-blanditiis (npm)
- Jun 3, 2024
Malicious code in @juiggitea/vero-placeat-ea-consequuntur (npm)
- Jun 3, 2024
Malicious code in @juiggitea/veritatis-dicta-odit (npm)
- Jun 3, 2024
Malware in @juiggitea/voluptatem-quos-blanditiis
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/veritatis-dicta-odit
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/voluptates-illum-consequatur
1 compromised version
- Jun 3, 2024
Malware in @juiggitea/vero-placeat-ea-consequuntur
1 compromised version
- Jun 3, 2024
Malware in calculator-avishek
1 compromised version
- Jun 3, 2024
Malware in command-injection-avi
1 compromised version
- Jun 3, 2024
Malicious code in @juiggitea/velit-incidunt-beatae (npm)
- Jun 3, 2024
Malicious code in @juiggitea/vel-et-repudiandae-sit (npm)
- Jun 3, 2024
Malicious code in @juiggitea/vel-ad-ut (npm)
- Jun 3, 2024
Malicious code in @juiggitea/ut-odit-at (npm)
- Jun 3, 2024
Malicious code in @juiggitea/ut-nostrum-temporibus-autem (npm)
- Jun 3, 2024
Malicious code in @juiggitea/totam-eligendi-tenetur (npm)
Page 6213 of 6,646