Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 19, 2025
Malicious code in talbat (PyPI)
1 compromised version
- Jul 19, 2025
Malicious code in one-fixed-dep-bins (npm)
5 compromised versions
- Jul 19, 2025
Malicious code in yarn-test-git-repo (npm)
1 compromised version
- Jul 19, 2025
Malicious code in ipp-auth-service-tools (npm)
1 compromised version
- Jul 19, 2025
Malicious code in uid2-ssportal (npm)
- Jul 18, 2025
Malicious code in rbx1325382 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in rbx1325 (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in blabutt (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in protolab (npm)
1 compromised version
- Jul 18, 2025
Malicious code in os-apps-ui-curvelibrary1 (npm)
2 compromised versions
- Jul 18, 2025
Malicious code in ably-realtime (npm)
- Jul 18, 2025
Malicious code in groq-mcp (PyPI)
2 compromised versions
- Jul 18, 2025
Malicious code in everestsystems-content-core (npm)
1 compromised version
- Jul 18, 2025
Malicious code in svcmanager (PyPI)
1 compromised version
- Jul 18, 2025
Malicious code in noya-vaults (npm)
1 compromised version
- Jul 18, 2025
Malicious code in privmx-crypto (npm)
- Jul 18, 2025
Malicious code in hg-icons-2 (npm)
1 compromised version
- Jul 17, 2025
Malware in @jssrv/template
1 compromised version
- Jul 17, 2025
Malware in @lensapp/eslint-config
1 compromised version
- Jul 17, 2025
Malicious code in sol-validator (npm)
- Jul 17, 2025
Malicious code in eth-validator (npm)
- Jul 17, 2025
Malware in sol-validator
1 compromised version
- Jul 17, 2025
Malware in eth-validator
1 compromised version
- Jul 17, 2025
Malicious code in nodemailer-helper (npm)
- Jul 17, 2025
Malware in nodemailer-helper
1 compromised version
- Jul 17, 2025
Malicious code in winston-compose (npm)
- Jul 17, 2025
Malicious code in react-hook-form-ui (npm)
- Jul 17, 2025
Malware in winston-compose
1 compromised version
- Jul 17, 2025
Malware in react-hook-form-ui
1 compromised version
- Jul 17, 2025
Malicious code in rtp-rapyd (npm)
- Jul 17, 2025
Malware in rtp-rapyd
1 compromised version
- Jul 17, 2025
Malicious code in dex-sample-app (npm)
- Jul 17, 2025
Malware in public-tools-and-demos
1 compromised version
- Jul 17, 2025
Malware in mttdocs
1 compromised version
- Jul 17, 2025
Malware in print-vault-node
1 compromised version
- Jul 17, 2025
Malware in eth-multisig-v4
1 compromised version
- Jul 17, 2025
Malware in glean-mcp-server
1 compromised version
- Jul 17, 2025
Malware in canonical-bridge-ui
1 compromised version
- Jul 17, 2025
Malware in dex-sample-app
1 compromised version
- Jul 17, 2025
Malware in notificationsandbox
1 compromised version
- Jul 17, 2025
Malware in lunasec
1 compromised version
- Jul 17, 2025
Malware in jenkins-for-jira-ui
1 compromised version
- Jul 17, 2025
Malware in iwf-typescript-sdk
1 compromised version
- Jul 17, 2025
Malicious code in @jssrv/template (npm)
1 compromised version
- Jul 17, 2025
Malicious code in marcom-ac-console (npm)
2 compromised versions
- Jul 17, 2025
Malicious code in avatar-handler (PyPI)
1 compromised version
- Jul 17, 2025
Malicious code in dascxcxcxcxcxcxxc (npm)
3 compromised versions
- Jul 17, 2025
Malicious code in acsascasccsaascascacs (npm)
5 compromised versions
- Jul 17, 2025
Malicious code in @company-internal/logger (npm)
1 compromised version
- Jul 17, 2025
Malicious code in @secsol5g/qlik-sense (npm)
1 compromised version
Page 6242 of 7,293