Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 1, 2026
Malicious code in @redhat-cloud-services/remediations-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/patch-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/notifications-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/javascript-clients-shared (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/insights-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/host-inventory-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-pf-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-utilities (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-translations (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-notifications (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-advisor-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/config-manager-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/compliance-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/sources-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/integrations-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-testing (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-config (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/entitlements-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/types (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/topological-inventory-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/rule-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/rbac-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/quickstarts-client (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components-config-utilities (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/frontend-components (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/eslint-config-redhat-cloud-services (npm)
3 compromised versions
- Jun 1, 2026
Malicious code in @redhat-cloud-services/chrome (npm)
3 compromised versions
- May 31, 2026
Malicious code in discord-massban (PyPI)
1 compromised version
- May 31, 2026
Malicious code in obfuscation (PyPI)
3 compromised versions
- May 31, 2026
Malicious code in js-shared-modules (npm)
1 compromised version
- May 31, 2026
Malicious code in @challenger6/vm-pattern-library (npm)
1 compromised version
- May 31, 2026
Malicious code in cscc-glass-house (PyPI)
4 compromised versions
- May 31, 2026
Malicious code in hell-cipher (PyPI)
1 compromised version
- May 31, 2026
Malicious code in h4xupdate (PyPI)
1 compromised version
- May 30, 2026
Malicious code in retail-location-strategy-frontend (npm)
2 compromised versions
- May 30, 2026
Malicious code in discord-ban (PyPI)
3 compromised versions
- May 30, 2026
Malicious code in cms-storehub (npm)
1 compromised version
- May 30, 2026
Malicious code in neuralforge-ml (PyPI)
1 compromised version
- May 30, 2026
Malicious code in crypto-helper (PyPI)
1 compromised version
- May 30, 2026
Malicious code in cryptolock (PyPI)
2 compromised versions
- May 30, 2026
Malicious code in buffer-utilities (npm)
3 compromised versions
- May 30, 2026
Malicious code in polymarket-data (PyPI)
2 compromised versions
- May 29, 2026
Malware in @t-in-one/restore_application_hid_from_storage
1 compromised version
- May 29, 2026
Malware in @capibar.chat/ui-kit
1 compromised version
- May 29, 2026
Malware in @t-in-one/prefill_bundle_data_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/safe_local_storage_token
1 compromised version
- May 29, 2026
Malware in @t-in-one/only_difference_payload
1 compromised version
Page 125 of 5,122