Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,236 total · sorted newest first- May 22, 2026
Malware in web3-secrets-detector
1 compromised version
- May 22, 2026
Malware in deployment-key-auditor
1 compromised version
- May 22, 2026
Malware in wallet-backup-verifier
1 compromised version
- May 22, 2026
Malware in credential-verification-cli
1 compromised version
- May 22, 2026
Malware in compliance-check-runner
1 compromised version
- May 22, 2026
Malware in python-env-auditor
1 compromised version
- May 22, 2026
Malware in pypi-build-verifier
1 compromised version
- May 22, 2026
Malware in build-integrity-verify
1 compromised version
- May 22, 2026
Malicious code in env-security-scanner (npm)
- May 22, 2026
Malware in foundry-deploy-helper
1 compromised version
- May 22, 2026
Malware in hardhat-gas-profiler-plugin
1 compromised version
- May 22, 2026
Malware in ethers-multicall-utils
1 compromised version
- May 22, 2026
Malware in truffle-config-helper
1 compromised version
- May 22, 2026
Malware in defi-threat-scanner
1 compromised version
- May 22, 2026
Malware in solana-pda-helper
1 compromised version
- May 22, 2026
Malware in ganache-cli-provider
1 compromised version
- May 22, 2026
Malware in crypto-credential-scanner
1 compromised version
- May 22, 2026
Malware in mnemonic-safety-check
1 compromised version
- May 22, 2026
Malware in chainlink-price-feed-aggregator
1 compromised version
- May 22, 2026
Malware in eth-wallet-sentinel
1 compromised version
- May 22, 2026
Malware in foundy-toolkit
1 compromised version
- May 22, 2026
Malware in env-security-scanner
1 compromised version
- May 22, 2026
Malware in defi-env-auditor
1 compromised version
- May 22, 2026
Malware in solidity-deploy-guard
1 compromised version
- May 22, 2026
Malware in etherjs-utils
1 compromised version
- May 22, 2026
Malware in solna-web3
1 compromised version
- May 22, 2026
Malware in wallet-security-checker
1 compromised version
- May 22, 2026
Malicious code in mev-shield (npm)
1 compromised version
- May 22, 2026
Malicious code in pylogft (PyPI)
2 compromised versions
- May 22, 2026
Malicious code in deploy-guard-check (npm)
1 compromised version
- May 22, 2026
Malicious code in build-integrity-verify (npm)
1 compromised version
- May 22, 2026
Malicious code in dependency-audit-tool (npm)
1 compromised version
- May 22, 2026
Malicious code in python-env-auditor (npm)
1 compromised version
- May 22, 2026
Malicious code in credential-verification-cli (npm)
1 compromised version
- May 22, 2026
Malicious code in compliance-check-runner (npm)
1 compromised version
- May 22, 2026
Malicious code in internallib_v493 (npm)
3 compromised versions
- May 22, 2026
Malicious code in audit-logsss (npm)
1 compromised version
- May 22, 2026
Malicious code in @exocore/exocode (npm)
3 compromised versions
- May 22, 2026
Malicious code in pylogfmt (PyPI)
1 compromised version
- May 22, 2026
Malicious code in allbridge-example-react (npm)
1 compromised version
- May 22, 2026
Malicious code in ignite-market-contracts (npm)
1 compromised version
- May 22, 2026
Malicious code in ignite-market-contractstest (npm)
2 compromised versions
- May 21, 2026
Malicious code in mathepy (PyPI)
14 compromised versions
- May 21, 2026
Malicious code in crypt0co-walet-poc (npm)
1 compromised version
- May 21, 2026
Malicious code in fakehuop (PyPI)
4 compromised versions
- May 21, 2026
Malicious code in claude-content-writer (npm)
1 compromised version
- May 21, 2026
Malicious code in @rui.branco/sentry-mcp (npm)
1 compromised version
- May 21, 2026
Malicious code in search-connector-template (npm)
1 compromised version
- May 21, 2026
Malicious code in configcat-trello-powerup (npm)
1 compromised version
- May 21, 2026
Malicious code in @remitee-money-transfer/rmt-base (npm)
4 compromised versions
Page 148 of 5,125