Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 28, 2025
Malware in mini-builder
1 compromised version
- Jul 28, 2025
Malware in paypal-examples-langchain
1 compromised version
- Jul 28, 2025
Malware in openai-fm
1 compromised version
- Jul 28, 2025
Malware in swap-token-list-poc
1 compromised version
- Jul 28, 2025
Malware in db-connections-templates
1 compromised version
- Jul 28, 2025
Malware in cloud-inquisitor
1 compromised version
- Jul 28, 2025
Malware in shopify-css-import
1 compromised version
- Jul 28, 2025
Malware in indexer-worker-service
1 compromised version
- Jul 28, 2025
Malware in ids-core
1 compromised version
- Jul 28, 2025
Malware in ipp-auth-service-tools
1 compromised version
- Jul 28, 2025
Malware in react-server-dom-turbopack-experimental
1 compromised version
- Jul 28, 2025
Malware in airbnb-booking
1 compromised version
- Jul 28, 2025
Malware in airbnb-prod
1 compromised version
- Jul 28, 2025
Malware in testinghs
1 compromised version
- Jul 28, 2025
Malware in react-server-dom-webpack-experimental
1 compromised version
- Jul 28, 2025
Malware in fuzzponent
1 compromised version
- Jul 28, 2025
Malware in scheduler-builtin
1 compromised version
- Jul 28, 2025
Malware in airbnb-private
1 compromised version
- Jul 28, 2025
Malware in scheduler-experimental-builtin
1 compromised version
- Jul 28, 2025
Malware in airbnb-prop
1 compromised version
- Jul 28, 2025
Malicious code in uidraftism (npm)
- Jul 28, 2025
Malware in uidraftism
1 compromised version
- Jul 27, 2025
Malicious code in hello-from-shiphero (PyPI)
1 compromised version
- Jul 27, 2025
Malicious code in message_gateway (RubyGems)
1 compromised version
- Jul 26, 2025
Malicious code in acronis-platform-configs (npm)
- Jul 26, 2025
Malicious code in turborepo-tests-helpers (npm)
- Jul 26, 2025
Malicious code in hast-util-to-babel-ast (npm)
1 compromised version
- Jul 26, 2025
Malicious code in node-buildpack-test-app (npm)
2 compromised versions
- Jul 26, 2025
Malicious code in package-with-conditions (npm)
2 compromised versions
- Jul 26, 2025
Malicious code in blank-pkg (npm)
1 compromised version
- Jul 26, 2025
Malicious code in prysk (npm)
1 compromised version
- Jul 26, 2025
Malicious code in next-minimal-server (npm)
1 compromised version
- Jul 26, 2025
Malicious code in prof-qux (PyPI)
4 compromised versions
- Jul 26, 2025
Malicious code in fuzzponent (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-saga-task-cancel-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-init-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-probe-unknown-action-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-saga-channel-end-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-update-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-loading-show-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in dva-loading-hide-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in redux-replace-rce (npm)
1 compromised version
- Jul 26, 2025
Malicious code in react-nodes (npm)
1 compromised version
- Jul 26, 2025
Malicious code in @grafanacloud/plugins-platform-backend (npm)
1 compromised version
- Jul 26, 2025
Malicious code in @grafanacloud/test-utils (npm)
3 compromised versions
- Jul 26, 2025
Malicious code in foundry-jupyter-extension (PyPI)
5 compromised versions
- Jul 25, 2025
Malicious code in prof-qx (PyPI)
5 compromised versions
- Jul 25, 2025
Malicious code in airbnb-booking (npm)
- Jul 25, 2025
Malicious code in testinghs (npm)
- Jul 25, 2025
Malicious code in rns-partner-registrar (npm)
Page 6233 of 7,293