Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 31, 2025
Malicious code in prof-tg-gjho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-gdghho-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in prof-tg-dggrto-qu (PyPI)
1 compromised version
- Jul 31, 2025
Malicious code in backtradingbot (PyPI)
5 compromised versions
- Jul 31, 2025
Malicious code in bullyshitty (npm)
1 compromised version
- Jul 31, 2025
Malicious code in rca-url-adaptator (npm)
1 compromised version
- Jul 30, 2025
Malicious code in actions-set-env-vars (npm)
- Jul 30, 2025
Malicious code in epic-fortnite-webpack-config (npm)
- Jul 30, 2025
Malicious code in enkryptcom (npm)
- Jul 30, 2025
Malicious code in subchart (npm)
- Jul 30, 2025
Malicious code in epic-games-nav-share (npm)
2 compromised versions
- Jul 30, 2025
Malicious code in epic-fortnite-shared-values (npm)
- Jul 30, 2025
Malicious code in sentry-core (npm)
- Jul 30, 2025
Malicious code in weavejs-backend (npm)
- Jul 30, 2025
Malicious code in @0xme5war/apicli (npm)
- Jul 30, 2025
Malicious code in spendesk (npm)
- Jul 30, 2025
Malicious code in astro-benchmark (npm)
5 compromised versions
- Jul 30, 2025
Malicious code in openai-tsp (npm)
2 compromised versions
- Jul 30, 2025
Malicious code in tms-spike (npm)
- Jul 30, 2025
Malicious code in mpesa-ui-components (npm)
- Jul 30, 2025
Malicious code in docusaurus-theme (npm)
- Jul 30, 2025
Malicious code in credit-card-input (npm)
- Jul 30, 2025
Malicious code in weavejs-frontend (npm)
- Jul 30, 2025
Malicious code in deno-r4-basic (npm)
- Jul 30, 2025
Malicious code in reference-library (npm)
1 compromised version
- Jul 30, 2025
Malicious code in build-angular (npm)
1 compromised version
- Jul 30, 2025
Malicious code in external-pkg (npm)
1 compromised version
- Jul 30, 2025
Malicious code in library-with-exports (npm)
1 compromised version
- Jul 30, 2025
Malicious code in plugin-commonjs (npm)
- Jul 30, 2025
Malicious code in bridge-emulator (npm)
2 compromised versions
- Jul 30, 2025
Malicious code in internal-pkg (npm)
1 compromised version
- Jul 30, 2025
Malicious code in airpr-honeybadger (npm)
- Jul 30, 2025
Malicious code in 7702-eoa-implementation (npm)
- Jul 30, 2025
Malicious code in blanl-pkg (npm)
1 compromised version
- Jul 30, 2025
Malicious code in hw-transport-node-hid (npm)
1 compromised version
- Jul 30, 2025
Malicious code in turborepo-examples (npm)
1 compromised version
- Jul 30, 2025
Malicious code in react-native-gainsight-px (npm)
- Jul 30, 2025
Malicious code in edenx (npm)
- Jul 30, 2025
Malicious code in sentry-utils (npm)
- Jul 30, 2025
Malicious code in trongridperm (PyPI)
1 compromised version
- Jul 30, 2025
Malicious code in @video-platform/react-osd (npm)
- Jul 30, 2025
Malicious code in @video-platform/react-core (npm)
- Jul 30, 2025
Malicious code in @video-platform/core (npm)
- Jul 30, 2025
Malicious code in @sme-configs/karma-coverage (npm)
- Jul 30, 2025
Malware in @video-platform/react-core
1 compromised version
- Jul 30, 2025
Malware in @video-platform/react-osd
1 compromised version
- Jul 30, 2025
Malware in @sme-configs/karma-coverage
1 compromised version
- Jul 30, 2025
Malware in @video-platform/core
1 compromised version
- Jul 30, 2025
Malicious code in @platform-ui-storybook/copy-button (npm)
- Jul 30, 2025
Malicious code in @hypervector/hypervector-test (npm)
Page 6229 of 7,293