Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,532 total · sorted newest first- Nov 5, 2026
Malicious code in dbt-adapter (PyPI)
2 compromised versions
- Nov 5, 2026
Malicious code in dependent-final (npm)
1 compromised version
- Nov 5, 2026
Malicious code in wiselllx (npm)
1 compromised version
- Nov 5, 2026
Malicious code in solidity-gas-watcher (npm)
1 compromised version
- Nov 5, 2026
Malicious code in xzvbailss (npm)
1 compromised version
- Nov 5, 2026
Malicious code in maila-talijah-alpha-128 (npm)
1 compromised version
- Nov 5, 2026
Malicious code in dian-peyek23-miaww (npm)
1 compromised version
- Nov 5, 2026
Malicious code in quiche-tea-curut (npm)
1 compromised version
- Nov 5, 2026
Malicious code in testtestkjkldfnjdfn (npm)
1 compromised version
- Nov 5, 2026
Malicious code in wisewwasd (npm)
1 compromised version
- Nov 5, 2026
Malicious code in wet_rat_replicate_automation (npm)
1 compromised version
- Nov 5, 2026
Malicious code in unemployed_xerinae-toolteadev (npm)
1 compromised version
- Nov 5, 2026
Malicious code in pearx93qja-notthedevs (npm)
1 compromised version
- Nov 5, 2026
Malicious code in solidity-map (npm)
1 compromised version
- Nov 5, 2026
Malicious code in solidity-cat (npm)
1 compromised version
- Nov 5, 2026
Malicious code in peas-tea-curut (npm)
1 compromised version
- Nov 5, 2026
Malicious code in low_hummingbird_replicate_automation (npm)
1 compromised version
- Nov 5, 2026
Malicious code in related_blackbird-toolteadev (npm)
1 compromised version
- Nov 5, 2026
Malicious code in wxwxtt (npm)
1 compromised version
- Nov 5, 2026
Malicious code in wiasdcxc (npm)
1 compromised version
- Nov 5, 2026
Malicious code in rcp-ndcg (PyPI)
1 compromised version
- Nov 5, 2026
Malicious code in @zyrennofficiall/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @bellaxchan/eleventech (npm)
1 compromised version
- Nov 5, 2026
Malicious code in ruby-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @sakataa/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in ndraawzz-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in lunaaa-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in kevinx-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @bellaxchan/sixtech (npm)
1 compromised version
- Nov 5, 2026
Malicious code in aemeath-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @wanzforme/bails (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @lekzox/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @raffnotdev/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @k.vict1999/pino-std-serializers (npm)
1 compromised version
- Nov 5, 2026
Malicious code in pino-std (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @dyllxnn/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @bellaxchan/techxatz (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @zaxius/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @alannxds/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in cs-core-api-phoenix (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @denzz221/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @axo_cuy/baileyss (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @bellaxchan/bailtech (npm)
1 compromised version
- Nov 5, 2026
Malicious code in ichigokurosaki-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @monze1239/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in loader-utils-kit (npm)
1 compromised version
- Nov 5, 2026
Malicious code in synapse-hub (npm)
4 compromised versions
- Nov 5, 2026
Malware in synapse-hub
1 compromised version
- Nov 5, 2026
Malicious code in rcp-ndcg (PyPI)
1 compromised version
- Nov 5, 2026
Malicious code in strands-aidr (PyPI)
1 compromised version
Page 3 of 7,311