Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,683 total · sorted newest first- Oct 19, 2026
Malware in chatgpt-desktop-setup
1 compromised version
- Oct 19, 2026
Malware in @decoopus/claude-setup
1 compromised version
- Oct 19, 2026
Malware in codex-setup
1 compromised version
- Oct 19, 2026
Malware in claude-desktop-setup
1 compromised version
- Oct 19, 2026
Malware in api-anthropic
1 compromised version
- Oct 19, 2026
Malware in @decoopus/chatgpt-setup
1 compromised version
- Oct 19, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in zubn7b (npm)
- Oct 19, 2026
Malicious code in ysqp68 (npm)
- Oct 19, 2026
Malicious code in x294tn (npm)
- Oct 19, 2026
Malicious code in waojpf (npm)
- Oct 19, 2026
Malicious code in v49yzy (npm)
- Oct 19, 2026
Malicious code in tkacg3 (npm)
- Oct 19, 2026
Malicious code in rvmbnj (npm)
- Oct 19, 2026
Malicious code in rhlozh (npm)
- Oct 19, 2026
Malicious code in oo9fja (npm)
- Oct 19, 2026
Malicious code in noe77e (npm)
- Oct 19, 2026
Malicious code in lstsyw (npm)
- Oct 19, 2026
Malicious code in ljem3j (npm)
- Oct 19, 2026
Malicious code in ju0oud (npm)
- Oct 19, 2026
Malicious code in j5opb7 (npm)
- Oct 19, 2026
Malicious code in j019qc (npm)
- Oct 19, 2026
Malicious code in ivzlid (npm)
- Oct 19, 2026
Malicious code in gtjgd4 (npm)
- Oct 19, 2026
Malicious code in giu094 (npm)
- Oct 19, 2026
Malicious code in g8ez1y (npm)
- Oct 19, 2026
Malicious code in g23p4g (npm)
- Oct 19, 2026
Malicious code in f4iomt (npm)
- Oct 19, 2026
Malicious code in f0klcr (npm)
- Oct 19, 2026
Malicious code in esgbz5 (npm)
- Oct 19, 2026
Malicious code in aqj3w7 (npm)
- Oct 19, 2026
Malicious code in 8i7pp4 (npm)
1 compromised version
- Oct 19, 2026
Malicious code in 8h66ok (npm)
- Oct 19, 2026
Malicious code in 5xzkuy (npm)
- Oct 19, 2026
Malicious code in 5k5t5q (npm)
- Oct 19, 2026
Malicious code in 4p9kgm (npm)
- Oct 19, 2026
Malicious code in 3qamjp (npm)
- Oct 19, 2026
Malicious code in 3gr841 (npm)
- Oct 19, 2026
Malicious code in 3gr2dj (npm)
- Oct 19, 2026
Malicious code in 1n9lip (npm)
- Oct 19, 2026
Malware in 3qamjp
1 compromised version
- Oct 19, 2026
Malware in f0klcr
1 compromised version
- Oct 19, 2026
Malware in 5k5t5q
1 compromised version
- Oct 19, 2026
Malware in rvmbnj
1 compromised version
- Oct 19, 2026
Malware in 1n9lip
1 compromised version
- Oct 19, 2026
Malware in 5xzkuy
1 compromised version
- Oct 19, 2026
Malware in gtjgd4
1 compromised version
- Oct 19, 2026
Malware in ivzlid
1 compromised version
Page 14 of 7,294