Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 8, 2026
Malicious code in regexp-ts (npm)
1 compromised version
- Jun 8, 2026
Malicious code in nodemon-lint (npm)
1 compromised version
- Jun 8, 2026
Malware in nodemon-lint
1 compromised version
- Jun 8, 2026
Malware in regexp-ts
1 compromised version
- Jun 8, 2026
Malicious code in nodemon-copack (npm)
2 compromised versions
- Jun 8, 2026
Malicious code in chai-mocks (npm)
1 compromised version
- Jun 8, 2026
Malware in nodemon-copack
1 compromised version
- Jun 8, 2026
Malware in chai-mocks
1 compromised version
- Jun 8, 2026
Malicious code in tlask (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in rlask (PyPI)
5 compromised versions
- Jun 8, 2026
Malicious code in rsquests (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in nhmpy (PyPI)
2 compromised versions
- Jun 8, 2026
Malicious code in zer0one-dnslog (npm)
10 compromised versions
- Jun 7, 2026
Malicious code in consumerweb-authflow (npm)
2 compromised versions
- Jun 7, 2026
Malicious code in bittensor-burn-watch (PyPI)
16 compromised versions
- Jun 7, 2026
Malicious code in clip-logger (PyPI)
8 compromised versions
- Jun 7, 2026
Malicious code in sequoia-engineering (npm)
1 compromised version
- Jun 7, 2026
Malicious code in @solana-labs/web3-js (npm)
7 compromised versions
- Jun 7, 2026
Malicious code in @solana-labs/etherjs (npm)
8 compromised versions
- Jun 6, 2026
Malicious code in unifi-portal (npm)
3 compromised versions
- Jun 6, 2026
Malicious code in uisp-connector (npm)
3 compromised versions
- Jun 6, 2026
Malicious code in encrypted-archive (npm)
2 compromised versions
- Jun 6, 2026
Malicious code in uhd-setup (npm)
2 compromised versions
- Jun 6, 2026
Malicious code in ray-mcp-server (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in pyphetools (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in ppkt2synergy (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in phenopacket-store-toolkit (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in orchestr8-platform (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in langchain-core-mcp (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in instructor-mcp (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in gpsea (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in ensmallen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in embiggen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in dreamgen (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in mflux-streamlit (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in funcdesc (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in pantheon-agents (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-engine (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in coolbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in magique-ai (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in cmd2func (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in synago (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in okite (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in mrbios (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in executor-http (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in bramin (PyPI)
3 compromised versions
- Jun 6, 2026
Malicious code in uprobe (PyPI)
2 compromised versions
Page 120 of 5,122