Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 1, 2025
Malicious code in internal-random (npm)
- Aug 1, 2025
Malicious code in amdocs-core-package (npm)
1 compromised version
- Aug 1, 2025
Malicious code in tableau-redirection-service (npm)
- Aug 1, 2025
Malicious code in playwright-config-pdffiller (npm)
- Aug 1, 2025
Malicious code in eslint-config-pdffiller (npm)
- Aug 1, 2025
Malicious code in loggerex (PyPI)
3 compromised versions
- Aug 1, 2025
Malicious code in supersafereverse (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)
2 compromised versions
- Aug 1, 2025
Malicious code in loquru (PyPI)
1 compromised version
- Aug 1, 2025
Malicious code in eslint-config-pdffiller-typescript (npm)
2 compromised versions
- Aug 1, 2025
Malicious code in balances-summary-widget (npm)
- Aug 1, 2025
Malicious code in customer-information (npm)
- Aug 1, 2025
Malicious code in goals-summary-widget (npm)
- Aug 1, 2025
Malicious code in vscode-kubernetes-tools (npm)
- Aug 1, 2025
Malicious code in fulfillment-auth-widget (npm)
- Aug 1, 2025
Malicious code in azuresdkpackagelist (npm)
- Aug 1, 2025
Malicious code in risk-profile-widget (npm)
- Aug 1, 2025
Malicious code in component-detection (npm)
1 compromised version
- Aug 1, 2025
Malicious code in ent-profile-unauth-stop (npm)
- Aug 1, 2025
Malicious code in web3-plugin-swisstronik (npm)
- Aug 1, 2025
Malicious code in @hotandcold/classic-webview (npm)
- Aug 1, 2025
Malicious code in pwm-components (npm)
1 compromised version
- Aug 1, 2025
Malicious code in zoop-web-sdk (npm)
- Aug 1, 2025
Malicious code in @sangith/eslint-config (npm)
- Jul 31, 2025
Malicious code in prof-tg-dooorto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in dhei-0731-pkg2 (npm)
- Jul 31, 2025
Malware in dhei-0731-pkg2
1 compromised version
- Jul 31, 2025
Malicious code in z0rsdumbtestnonshould (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in wild-pet-rest-api (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in walmart-ui (npm)
1 compromised version
- Jul 31, 2025
Malicious code in varshade (npm)
1 compromised version
- Jul 31, 2025
Malicious code in thehut (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-package-avinav (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion2 (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion-detector (npm)
1 compromised version
- Jul 31, 2025
Malicious code in test-confusion (npm)
1 compromised version
- Jul 31, 2025
Malicious code in tensor-nft-js (npm)
6 compromised versions
- Jul 31, 2025
Malicious code in synerix (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in sukhrajaujla (npm)
1 compromised version
- Jul 31, 2025
Malicious code in stv-utils-frontend (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in solarapatcher (npm)
1 compromised version
- Jul 31, 2025
Malicious code in simple-auth-manager-ui (npm)
1 compromised version
- Jul 31, 2025
Malicious code in shop-disclaimer (npm)
7 compromised versions
- Jul 31, 2025
Malicious code in seller-center (npm)
1 compromised version
- Jul 31, 2025
Malicious code in schematics-cli (npm)
1 compromised version
- Jul 31, 2025
Malicious code in sajarilib (npm)
3 compromised versions
- Jul 31, 2025
Malicious code in react-is-router (npm)
1 compromised version
- Jul 31, 2025
Malicious code in processes-widget-fe-commons (npm)
2 compromised versions
- Jul 31, 2025
Malicious code in pr0tobuff-loaders-alt (npm)
1 compromised version
- Jul 31, 2025
Malicious code in pr0tobuff-loaders (npm)
4 compromised versions
Page 6225 of 7,293