Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 15, 2026
Malicious code in node-scraper (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in dispatch-internal-plugins (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in llvm-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in gigl-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in databricks-tools-core (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mlir-aie (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in intel-ai-safety (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in sl-pgp (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in kinto-slack (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in mozautomation (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in scriptworker-client (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in pyptllm (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in boardflow (npm)
8 compromised versions
- Jun 15, 2026
Malicious code in boardstep (npm)
9 compromised versions
- Jun 15, 2026
Malicious code in testpgagent (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in flow-lending (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flow-lending-sdk (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flowdefi (npm)
1 compromised version
- Jun 15, 2026
Malicious code in surf-lending (npm)
1 compromised version
- Jun 15, 2026
Malicious code in bodega-sdk (npm)
1 compromised version
- Jun 15, 2026
Malicious code in flowcardano (npm)
1 compromised version
- Jun 15, 2026
Malicious code in @solana-labs/ancor (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in @solana-labs/spl-toke (npm)
8 compromised versions
- Jun 15, 2026
Malicious code in @solana-labs/web3js (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in claude-cup (npm)
39 compromised versions
- Jun 15, 2026
Malicious code in mddriver (npm)
6 compromised versions
- Jun 15, 2026
Malicious code in neurodrift (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in neural-network-scan (npm)
4 compromised versions
- Jun 15, 2026
Malicious code in llmfree (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in gptminifast (PyPI)
1 compromised version
- Jun 15, 2026
Malicious code in nativescript-swisspost-imagepicker (npm)
1 compromised version
- Jun 15, 2026
Malicious code in nativescript-swisspost-pcc-creative-editor (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ldpbootstrap-jquery (npm)
14 compromised versions
- Jun 15, 2026
Malicious code in sam-package (npm)
19 compromised versions
- Jun 15, 2026
Malicious code in field-plus (npm)
2 compromised versions
- Jun 15, 2026
Malicious code in ing-feat-itsme-oidc-authentication (npm)
1 compromised version
- Jun 15, 2026
Malicious code in portal-backend (npm)
1 compromised version
- Jun 15, 2026
Malicious code in token-prices-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in vaults-monitor-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in hemi-supply-cron (npm)
1 compromised version
- Jun 15, 2026
Malicious code in hemi-earn-actions (npm)
1 compromised version
- Jun 15, 2026
Malicious code in vault-strategies (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ve-hemi-rewards (npm)
1 compromised version
- Jun 15, 2026
Malicious code in unico-android (npm)
1 compromised version
- Jun 15, 2026
Malicious code in fastgptmini (PyPI)
6 compromised versions
- Jun 15, 2026
Malicious code in unicocheck-ios (npm)
1 compromised version
- Jun 15, 2026
Malicious code in unico-check (npm)
1 compromised version
- Jun 15, 2026
Malicious code in nic-datagov (npm)
1 compromised version
- Jun 15, 2026
Malicious code in ckanext-dms (PyPI)
2 compromised versions
- Jun 15, 2026
Malicious code in um4r719-baileys (npm)
Page 107 of 5,122