Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 20, 2025
Malicious code in mooduliop (npm)
- Jul 20, 2025
Malware in mooduliop
1 compromised version
- Jul 20, 2025
Malicious code in grayavatar (npm)
- Jul 20, 2025
Malware in grayavatar
1 compromised version
- Jul 20, 2025
Malicious code in rc-logger (npm)
- Jul 20, 2025
Malware in rc-logger
1 compromised version
- Jul 20, 2025
Malicious code in config-log (npm)
- Jul 20, 2025
Malware in config-log
1 compromised version
- Jul 20, 2025
Malicious code in @nytt/sass-utils (npm)
- Jul 20, 2025
Malicious code in @toptal/picasso-quote (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-slider (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-select (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-link (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-switch (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-graphql-codegen-extensions (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-form (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-popper (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-button (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-alert (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-dropdown (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-accordion (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-logo (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-paper (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-radio (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-image (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-typography (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-grid (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-icons (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-dropzone (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-container (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-calendar (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @xene/core (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-provider (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-rich-text-editor (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-shared (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-tailwind (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-lab (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-forms (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-charts (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-monorepo (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso (npm)
1 compromised version
- Jul 20, 2025
Malicious code in creator-portal-web (npm)
- Jul 20, 2025
Malicious code in wc (npm)
- Jul 20, 2025
Malicious code in ruamel-poc (PyPI)
2 compromised versions
- Jul 19, 2025
Malicious code in hahabott (PyPI)
7 compromised versions
- Jul 19, 2025
Malicious code in aphorism-lib (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in lazmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hkmat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in hekamhelp (PyPI)
1 compromised version
Page 6241 of 7,293