Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in opsadmin (npm)
- Aug 14, 2025
Malicious code in opress (npm)
- Aug 14, 2025
Malicious code in opiblog (npm)
- Aug 14, 2025
Malicious code in ophiuchus-whitedwarf-janus-proteomics (npm)
- Aug 14, 2025
Malicious code in ophiuchus-telesto-local-zenith (npm)
- Aug 14, 2025
Malicious code in ophiuchus-phoenix-rimraf-convict (npm)
- Aug 14, 2025
Malicious code in ophiuchus-greatfilter-delphinus-ceres (npm)
- Aug 14, 2025
Malicious code in ophiuchus-farout-yakutsk-bellatrix (npm)
- Aug 14, 2025
Malicious code in ophiuchus-cosmicray-xerxes-eslint-config (npm)
- Aug 14, 2025
Malicious code in ophiuchus-comet-wavefunction-event (npm)
- Aug 14, 2025
Malicious code in ophiuchus-backend-perseus-jabbah (npm)
- Aug 14, 2025
Malicious code in ophiuchus-aquarius-antd-meissa (npm)
- Aug 14, 2025
Malicious code in ophiuchus-algol-troposphere-dendrochronology (npm)
- Aug 14, 2025
Malicious code in openzeppelin-solidity-2.3.0 (npm)
- Aug 14, 2025
Malicious code in openwow (npm)
- Aug 14, 2025
Malicious code in openwom (npm)
- Aug 14, 2025
Malicious code in openuax (npm)
- Aug 14, 2025
Malicious code in openturf (npm)
- Aug 14, 2025
Malicious code in opentree (npm)
- Aug 14, 2025
Malicious code in opentelemetry-shopify (npm)
- Aug 14, 2025
Malicious code in opent2t-translator-com-hue-hub (npm)
- Aug 14, 2025
Malicious code in opent2t-translator-com-hue-bulb (npm)
- Aug 14, 2025
Malicious code in opent2t-onboarding-org-opent2t-onboarding-hue (npm)
- Aug 14, 2025
Malicious code in opent2t-onboarding-huehub (npm)
- Aug 14, 2025
Malicious code in opensuse-leapyiwusan-sysanal-tune-guide (npm)
- Aug 14, 2025
Malicious code in openslava (npm)
- Aug 14, 2025
Malicious code in openset (npm)
- Aug 14, 2025
Malicious code in opensearch-console-server (npm)
- Aug 14, 2025
Malicious code in openseadragon-qtip-annotations (npm)
- Aug 14, 2025
Malicious code in openptv (npm)
- Aug 14, 2025
Malicious code in openpom (npm)
- Aug 14, 2025
Malicious code in openikt-web (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in openideo (npm)
- Aug 14, 2025
Malicious code in openhpmis (npm)
- Aug 14, 2025
Malicious code in opengls (npm)
- Aug 14, 2025
Malicious code in opengaze (npm)
- Aug 14, 2025
Malicious code in openfest (npm)
- Aug 14, 2025
Malicious code in openfat (npm)
- Aug 14, 2025
Malicious code in openexr (npm)
- Aug 14, 2025
Malicious code in openexpo (npm)
- Aug 14, 2025
Malicious code in opencv-compare-image (npm)
- Aug 14, 2025
Malicious code in openchile (npm)
- Aug 14, 2025
Malicious code in openai-realtime-console-plugin (npm)
- Aug 14, 2025
Malicious code in open-xchange-appsuite-help (npm)
- Aug 14, 2025
Malicious code in open-banking-reference-application-australia-region (npm)
- Aug 14, 2025
Malicious code in opdehy (npm)
- Aug 14, 2025
Malicious code in opaline_tj1n7_81njq_kismet (npm)
- Aug 14, 2025
Malicious code in opaline_khqj7_ygopi_thunder (npm)
- Aug 14, 2025
Malicious code in opaline_jjrni_3ms2f_oasis (npm)
- Aug 14, 2025
Malicious code in opaline_ekxmq_6cylq_jade (npm)
Page 5854 of 7,293