Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Oct 20, 2026
Malicious code in sc-announcer (npm)
2 compromised versions
- Oct 20, 2026
Malicious code in fanarena-common (npm)
1 compromised version
- Oct 20, 2026
Malicious code in ccl-global-shopping (npm)
2 compromised versions
- Oct 20, 2026
Malicious code in sc-wizard (npm)
1 compromised version
- Oct 20, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/stage-repo-m19g7 (npm)
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/stage-outer-m19s5 (npm)
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/stage-fn-m19p2 (npm)
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm)
3 compromised versions
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/gat-scope-target-125ec19a (npm)
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/stage-fn-m19p2
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/gat-scope-target-125ec19a
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/stage-outer-m19s5
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/stage-repo-m19g7
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/pipe-dns-m19t2
1 compromised version
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/pipe-compat-m19r8 (npm)
- Oct 19, 2026
Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm)
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/oidc-cross-cafb9d929e
1 compromised version
- Oct 19, 2026
Malware in @an1mshnpmb9c84920/pipe-compat-m19r8
1 compromised version
- Oct 19, 2026
Malicious code in codex-setup (npm)
4 compromised versions
- Oct 19, 2026
Malicious code in claude-desktop-setup (npm)
14 compromised versions
- Oct 19, 2026
Malicious code in chatgpt-pro-setup-tool (npm)
- Oct 19, 2026
Malicious code in chatgpt-pro-activator (npm)
- Oct 19, 2026
Malicious code in chatgpt-desktop-setup (npm)
4 compromised versions
- Oct 19, 2026
Malicious code in api-anthropic (npm)
6 compromised versions
- Oct 19, 2026
Malicious code in @decoopus/claude-setup (npm)
14 compromised versions
- Oct 19, 2026
Malicious code in @decoopus/chatgpt-setup (npm)
4 compromised versions
- Oct 19, 2026
Malware in chatgpt-pro-setup-tool
1 compromised version
- Oct 19, 2026
Malware in chatgpt-pro-activator
1 compromised version
- Oct 19, 2026
Malware in chatgpt-desktop-setup
1 compromised version
- Oct 19, 2026
Malware in @decoopus/claude-setup
1 compromised version
- Oct 19, 2026
Malware in codex-setup
1 compromised version
- Oct 19, 2026
Malware in claude-desktop-setup
1 compromised version
- Oct 19, 2026
Malware in api-anthropic
1 compromised version
- Oct 19, 2026
Malware in @decoopus/chatgpt-setup
1 compromised version
- Oct 19, 2026
Malicious code in asurion (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in vinted-mocked-apis (PyPI)
1 compromised version
- Oct 19, 2026
Malicious code in zubn7b (npm)
- Oct 19, 2026
Malicious code in ysqp68 (npm)
- Oct 19, 2026
Malicious code in x294tn (npm)
- Oct 19, 2026
Malicious code in waojpf (npm)
- Oct 19, 2026
Malicious code in v49yzy (npm)
- Oct 19, 2026
Malicious code in tkacg3 (npm)
- Oct 19, 2026
Malicious code in rvmbnj (npm)
- Oct 19, 2026
Malicious code in rhlozh (npm)
- Oct 19, 2026
Malicious code in oo9fja (npm)
- Oct 19, 2026
Malicious code in noe77e (npm)
- Oct 19, 2026
Malicious code in lstsyw (npm)
- Oct 19, 2026
Malicious code in ljem3j (npm)
Page 31 of 7,312