Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,552 total · sorted newest first- Oct 25, 2026
Malware in appit-cordova-plugin-ionic
1 compromised version
- Oct 25, 2026
Malware in youtube-search-without-api-key
1 compromised version
- Oct 25, 2026
Malware in appit-cordova-admob
1 compromised version
- Oct 25, 2026
Malware in ocsp-hashes
1 compromised version
- Oct 25, 2026
Malware in redis-dumper
1 compromised version
- Oct 25, 2026
Malware in ionic-youtube-search
1 compromised version
- Oct 25, 2026
Malware in youtube-info-streams
1 compromised version
- Oct 25, 2026
Malware in ionic-insta-api-wrapper
1 compromised version
- Oct 25, 2026
Malware in cordova-plugin-geofence-appit
1 compromised version
- Oct 25, 2026
Malware in ionic-insta-search
1 compromised version
- Oct 25, 2026
Malware in ionic-youtube-streams
1 compromised version
- Oct 25, 2026
Malicious code in p12-pem (npm)
- Oct 25, 2026
Malicious code in cert-infos (npm)
- Oct 25, 2026
Malware in cert-infos
1 compromised version
- Oct 25, 2026
Malware in p12-pem
1 compromised version
- Oct 25, 2026
Malicious code in @eforms/forms-api (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @eforms/forms-api (npm)
8 compromised versions
- Oct 25, 2026
Malicious code in @drone-js-ext/core (npm)
6 compromised versions
- Oct 25, 2026
Malicious code in @drone-js-ext/vip-badge (npm)
6 compromised versions
- Oct 25, 2026
Malicious code in tailwind-base-buttons (npm)
1 compromised version
- Oct 25, 2026
Malware in tailwind-base-buttons
1 compromised version
- Oct 24, 2026
Malicious code in tailwindcss-theme-kit (npm)
- Oct 24, 2026
Malicious code in noelc-css-blender (npm)
4 compromised versions
- Oct 24, 2026
Malware in tailwindcss-theme-kit
1 compromised version
- Oct 24, 2026
Malware in noelc-css-blender
1 compromised version
- Oct 24, 2026
Malicious code in overarch-windows-x64-yr (npm)
3 compromised versions
- Oct 24, 2026
Malware in overarch-windows-x64-yr
1 compromised version
- Oct 24, 2026
Malicious code in @liauto/win32-x64 (npm)
1 compromised version
- Oct 24, 2026
Malware in @liauto/win32-x64
1 compromised version
- Oct 23, 2026
Malicious code in @sxm-web/client-sdk-core (npm)
9 compromised versions
- Oct 23, 2026
Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)
2 compromised versions
- Oct 23, 2026
Malware in @k18k/entrypoint-sdk-darwin-arm64
1 compromised version
- Oct 23, 2026
Malicious code in orqiva-runtime-win32-x64 (npm)
1 compromised version
- Oct 23, 2026
Malware in orqiva-runtime-win32-x64
1 compromised version
- Oct 23, 2026
Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)
2 compromised versions
- Oct 23, 2026
Malware in @k18k/entrypoint-sdk-linux-x64
1 compromised version
- Oct 23, 2026
Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)
2 compromised versions
- Oct 23, 2026
Malware in @k18k/entrypoint-sdk-darwin-x64
1 compromised version
- Oct 23, 2026
Malicious code in @greenlake/session (npm)
6 compromised versions
- Oct 23, 2026
Malicious code in @greenlake/mfe-login-url (npm)
5 compromised versions
- Oct 23, 2026
Malicious code in @greenlake/context-pane (npm)
4 compromised versions
- Oct 23, 2026
Malicious code in @greenlake/common-context (npm)
4 compromised versions
- Oct 23, 2026
Malicious code in @greenlake/auth (npm)
3 compromised versions
- Oct 23, 2026
Malicious code in sedgehaul (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in runpier (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in reedworker (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in slatejob (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in otterload (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in brambletask (PyPI)
1 compromised version
- Oct 23, 2026
Malicious code in larchworker (PyPI)
1 compromised version
Page 23 of 7,312