Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 28, 2025
Malicious code in vc-test-suite (npm)
- Jul 28, 2025
Malicious code in account-feapp-commons (npm)
- Jul 28, 2025
Malicious code in ifood-docusaurus-theme (npm)
- Jul 28, 2025
Malicious code in greater-than (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in requires-python (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in supersafecalc (PyPI)
3 compromised versions
- Jul 28, 2025
Malicious code in nio4r (npm)
- Jul 28, 2025
Malicious code in wbcm (npm)
- Jul 28, 2025
Malicious code in @cwlib/core (npm)
- Jul 28, 2025
Malicious code in @ai0x1337/budoux-extension (npm)
- Jul 28, 2025
Malicious code in testpkgcwlib (npm)
- Jul 28, 2025
Malicious code in hyperion-react-native-testapp (npm)
1 compromised version
- Jul 28, 2025
Malicious code in isl-server (npm)
- Jul 28, 2025
Malicious code in hubot-currencies (npm)
- Jul 28, 2025
Malicious code in com.tencent.puerts.core (npm)
1 compromised version
- Jul 28, 2025
Malicious code in tdesign-flutter (npm)
1 compromised version
- Jul 28, 2025
Malicious code in cumulus-core (npm)
1 compromised version
- Jul 28, 2025
Malicious code in trigger-dev-logger (npm)
1 compromised version
- Jul 28, 2025
Malicious code in internal-logger-embaby (npm)
- Jul 28, 2025
Malicious code in events-web1 (npm)
- Jul 28, 2025
Malicious code in ethical-ping-example (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in spot-tasks (npm)
- Jul 28, 2025
Malicious code in sirius-import-article (npm)
4 compromised versions
- Jul 28, 2025
Malicious code in node-sqlite-fly-tutorial (npm)
- Jul 28, 2025
Malicious code in vortigawe (npm)
1 compromised version
- Jul 28, 2025
Malicious code in nova-ssr-utils (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in nova-node-utils (npm)
1 compromised version
- Jul 28, 2025
Malicious code in react-native-at-internet-example (npm)
- Jul 28, 2025
Malicious code in slack-astra-app (npm)
2 compromised versions
- Jul 28, 2025
Malicious code in work-planner-client (npm)
- Jul 28, 2025
Malicious code in conformance-test (npm)
- Jul 28, 2025
Malicious code in tidb-lightning-web (npm)
- Jul 28, 2025
Malicious code in onboarding-lemonde (npm)
4 compromised versions
- Jul 28, 2025
Malicious code in treeherder-submitter (PyPI)
1 compromised version
- Jul 28, 2025
Malicious code in triple-equals (PyPI)
2 compromised versions
- Jul 28, 2025
Malicious code in style-postprocessor (npm)
- Jul 28, 2025
Malware in style-postprocessor
1 compromised version
- Jul 28, 2025
Malware in kalitestbbh
1 compromised version
- Jul 28, 2025
Malware in kalitest11
1 compromised version
- Jul 28, 2025
Malware in plugin-basic-ssl
1 compromised version
- Jul 28, 2025
Malware in google-protobuf-conformance
1 compromised version
- Jul 28, 2025
Malicious code in solhint-plugin-lido-csm (npm)
- Jul 28, 2025
Malware in solhint-plugin-lido-csm
1 compromised version
- Jul 28, 2025
Malicious code in bfiweb (npm)
- Jul 28, 2025
Malware in bfiweb
1 compromised version
- Jul 28, 2025
Malware in creditorwatch
1 compromised version
- Jul 28, 2025
Malware in nonexistentgibberish
1 compromised version
- Jul 28, 2025
Malware in mv-fe-scss
1 compromised version
- Jul 28, 2025
Malware in headless-skia
1 compromised version
- Jul 28, 2025
Malware in dndattachment
1 compromised version
Page 6232 of 7,293