Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 4, 2025
Malicious code in jcr-hopper (npm)
- Aug 4, 2025
Malicious code in byteplus-public-aiso (npm)
1 compromised version
- Aug 4, 2025
Malicious code in byteplus-platform-runtime (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestz (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventest (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestpoc (npm)
1 compromised version
- Aug 4, 2025
Malicious code in thisisthedaventestz (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in zhopaorlaaato (PyPI)
1 compromised version
- Aug 4, 2025
Malicious code in sisaws (PyPI)
1 compromised version
- Aug 4, 2025
Malware in epic-fortnite-shared-values
1 compromised version
- Aug 4, 2025
Malware in epic-games-nav-share
1 compromised version
- Aug 3, 2025
Malicious code in bp-console-fe-sg (npm)
1 compromised version
- Aug 3, 2025
Malicious code in thisisthedaventest (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in pexels-figma (npm)
- Aug 3, 2025
Malicious code in pexels-core-sdk (npm)
- Aug 3, 2025
Malicious code in pexels-internal (npm)
- Aug 3, 2025
Malicious code in internal-newrelic-config (npm)
- Aug 3, 2025
Malicious code in nr1-github (npm)
- Aug 3, 2025
Malicious code in totallysafe (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsodelib (PyPI)
1 compromised version
- Aug 3, 2025
Malicious code in dziplib (PyPI)
2 compromised versions
- Aug 3, 2025
Malicious code in dsidelib (PyPI)
15 compromised versions
- Aug 3, 2025
Malicious code in secmeasure (PyPI)
3 compromised versions
- Aug 3, 2025
Malicious code in node-calculator-yqhi (npm)
- Aug 3, 2025
Malicious code in node-calculator-fahw (npm)
- Aug 3, 2025
Malicious code in node-calculator-splo (npm)
- Aug 3, 2025
Malicious code in cycalculator-ybvd (npm)
- Aug 3, 2025
Malicious code in cycalculator-ye51 (npm)
- Aug 3, 2025
Malicious code in undeface-test-5 (npm)
- Aug 3, 2025
Malicious code in undeface-test-1 (npm)
- Aug 3, 2025
Malicious code in currency-util (npm)
- Aug 3, 2025
Malicious code in zano_ui (npm)
- Aug 3, 2025
Malicious code in amdocs-auth-package (npm)
3 compromised versions
- Aug 2, 2025
Malicious code in supersafepackage (PyPI)
10 compromised versions
- Aug 2, 2025
Malicious code in bh-usa-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in bh-usa-automate-req-ase (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in aiohappyeyeballs (npm)
2 compromised versions
- Aug 2, 2025
Malicious code in tsesyx (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in web3dummycti (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in xo-angular-ui-utils (npm)
3 compromised versions
- Aug 2, 2025
Malicious code in ledger-provider (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test-3 (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test-2 (npm)
1 compromised version
- Aug 2, 2025
Malicious code in newrelic-scheduler (npm)
5 compromised versions
- Aug 2, 2025
Malicious code in undeface (npm)
1 compromised version
- Aug 2, 2025
Malicious code in undeface-test (npm)
1 compromised version
- Aug 2, 2025
Malicious code in req-ase-automate (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-pre-automate (PyPI)
1 compromised version
- Aug 2, 2025
Malicious code in req-pre-automate1 (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in cerberux (npm)
2 compromised versions
Page 6224 of 7,293