Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 6, 2026
Malicious code in spateo-release (PyPI)
1 compromised version
- Jun 6, 2026
Malicious code in pantheon-toolsets (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in nucbox (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in napari-ufish (PyPI)
2 compromised versions
- Jun 6, 2026
Malicious code in dynamo-release (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in anthropy (PyPI)
6 compromised versions
- Jun 5, 2026
Malicious code in goodoltoulas (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in goodoldtoulas (PyPI)
1 compromised version
- Jun 5, 2026
Malicious code in reactvora (npm)
- Jun 5, 2026
Malware in reactvora
1 compromised version
- Jun 5, 2026
Malicious code in glyphr (npm)
- Jun 5, 2026
Malware in glyphr
1 compromised version
- Jun 5, 2026
Malware in react-ui-polyfills
1 compromised version
- Jun 5, 2026
Malware in utils-mf
1 compromised version
- Jun 5, 2026
Malicious code in ulid-os (npm)
1 compromised version
- Jun 5, 2026
Malware in ulid-os
1 compromised version
- Jun 5, 2026
Malicious code in wrangler-deploy (npm)
1 compromised version
- Jun 5, 2026
Malicious code in node-env-resolver-vite (npm)
1 compromised version
- Jun 5, 2026
Malicious code in node-env-resolver-nextjs (npm)
1 compromised version
- Jun 5, 2026
Malicious code in node-env-resolver-dotenvx (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in node-env-resolver-aws (npm)
4 compromised versions
- Jun 5, 2026
Malicious code in node-env-resolver (npm)
1 compromised version
- Jun 5, 2026
Malicious code in mountly-tailwind (npm)
1 compromised version
- Jun 5, 2026
Malicious code in mountly (npm)
1 compromised version
- Jun 5, 2026
Malicious code in github-archiver (npm)
26 compromised versions
- Jun 5, 2026
Malicious code in executable-stories-vitest (npm)
7 compromised versions
- Jun 5, 2026
Malicious code in executable-stories-react (npm)
1 compromised version
- Jun 5, 2026
Malicious code in executable-stories-playwright (npm)
6 compromised versions
- Jun 5, 2026
Malicious code in executable-stories-mcp (npm)
1 compromised version
- Jun 5, 2026
Malicious code in executable-stories-jest (npm)
6 compromised versions
- Jun 5, 2026
Malicious code in executable-stories-init (npm)
1 compromised version
- Jun 5, 2026
Malicious code in executable-stories-formatters (npm)
1 compromised version
- Jun 5, 2026
Malicious code in executable-stories-demo (npm)
1 compromised version
- Jun 5, 2026
Malicious code in executable-stories-cypress (npm)
6 compromised versions
- Jun 5, 2026
Malicious code in eslint-plugin-executable-stories-vitest (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in eslint-plugin-executable-stories-playwright (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in eslint-plugin-executable-stories-jest (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in eslint-plugin-awaitly (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in effect-analyzer (npm)
1 compromised version
- Jun 5, 2026
Malicious code in discord-search (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in dbmux (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in creditcard.js (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in create-wrangler-deploy (npm)
1 compromised version
- Jun 5, 2026
Malicious code in create-cf-token (npm)
2 compromised versions
- Jun 5, 2026
Malicious code in awaitly-visualizer (npm)
22 compromised versions
- Jun 5, 2026
Malicious code in awaitly-postgres (npm)
24 compromised versions
- Jun 5, 2026
Malicious code in awaitly-mongo (npm)
24 compromised versions
- Jun 5, 2026
Malicious code in awaitly-libsql (npm)
23 compromised versions
- Jun 5, 2026
Malicious code in awaitly-analyze (npm)
9 compromised versions
- Jun 5, 2026
Malicious code in awaitly (npm)
1 compromised version
Page 121 of 5,122