Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,886 total · sorted newest first- Jul 8, 2026
Malicious code in @luminarycloudinternal/frodo (npm)
3 compromised versions
- Jul 8, 2026
Malicious code in promo-helper (npm)
8 compromised versions
- Jul 8, 2026
Malicious code in manom (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in manik (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in tronpak (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in @vite-ln/build-ts (npm)
2 compromised versions
- Jul 8, 2026
Malicious code in paysafe-cards (npm)
1 compromised version
- Jul 8, 2026
Malicious code in domains-billing-types (npm)
1 compromised version
- Jul 8, 2026
Malicious code in manin (PyPI)
3 compromised versions
- Jul 8, 2026
Malicious code in turbod (PyPI)
8 compromised versions
- Jul 8, 2026
Malicious code in py-slugify (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in rarcore (PyPI)
2 compromised versions
- Jul 8, 2026
Malicious code in oxntime (PyPI)
4 compromised versions
- Jul 8, 2026
Malicious code in @vwfs-its/sf-sac-frontend (npm)
1 compromised version
- Jul 8, 2026
Malicious code in tronhapy (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in gitlens (npm)
2 compromised versions
- Jul 8, 2026
Malicious code in jsonschemavalid (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in tronhap (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in rony-testing (npm)
1 compromised version
- Jul 8, 2026
Malicious code in nam-os-a-man (npm)
1 compromised version
- Jul 8, 2026
Malicious code in na-rony-test-karem (npm)
- Jul 8, 2026
Malicious code in na-rony-test (npm)
- Jul 8, 2026
Malicious code in na-rony (npm)
4 compromised versions
- Jul 8, 2026
Malicious code in karem-dp (npm)
- Jul 8, 2026
Malicious code in vite-json-pwa (npm)
2 compromised versions
- Jul 8, 2026
Malicious code in gas-log (npm)
2 compromised versions
- Jul 8, 2026
Malicious code in pyqt6darktheme (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in waymo-waymax (PyPI)
1 compromised version
- Jul 8, 2026
Malicious code in proton_pfff (crates.io)
1 compromised version
- Jul 8, 2026
Malicious code in nodemon-node (npm)
- Jul 8, 2026
Malicious code in ts-await (npm)
- Jul 8, 2026
Malicious code in rio-design-tokens (npm)
2 compromised versions
- Jul 7, 2026
Malicious code in hello244b (npm)
1 compromised version
- Jul 7, 2026
Malicious code in tiktoken-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in whs4_npm_test (npm)
4 compromised versions
- Jul 7, 2026
Malicious code in @whs4/whs4_npm (npm)
- Jul 7, 2026
Malicious code in wsh4_npm (npm)
1 compromised version
- Jul 7, 2026
Malicious code in whs4_pnm (npm)
1 compromised version
- Jul 7, 2026
Malicious code in whs4_npm (npm)
1 compromised version
- Jul 7, 2026
Malicious code in whs4_nmp (npm)
2 compromised versions
- Jul 7, 2026
Malicious code in ray-mcp-server (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in orchestr8-platform (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in runtimedev-link (npm)
13 compromised versions
- Jul 7, 2026
Malicious code in openai-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in mem8 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in polytrade (npm)
1 compromised version
- Jul 7, 2026
Malicious code in langchain-core-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in instructor-mcp (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in evm-typechain (npm)
1 compromised version
- Jul 7, 2026
Malicious code in dreamgen (PyPI)
1 compromised version
Page 15 of 5,118