Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 17, 2025
Malicious code in vercel-edge (npm)
1 compromised version
- Jul 17, 2025
Malicious code in codex-action (npm)
2 compromised versions
- Jul 17, 2025
Malicious code in ts-browser-webpack (npm)
2 compromised versions
- Jul 17, 2025
Malicious code in node-ts-esm-auto (npm)
1 compromised version
- Jul 17, 2025
Malicious code in preview-server-auth-poc (npm)
1 compromised version
- Jul 17, 2025
Malicious code in ngx-satoris (npm)
2 compromised versions
- Jul 17, 2025
Malicious code in lunasec (npm)
1 compromised version
- Jul 17, 2025
Malicious code in @ivy-shared-components/testing (npm)
1 compromised version
- Jul 16, 2025
Malicious code in ethers3-wallet (npm)
- Jul 16, 2025
Malware in ethers3-wallet
1 compromised version
- Jul 16, 2025
Malicious code in pro-rhr-container (npm)
1 compromised version
- Jul 16, 2025
Malicious code in memorylib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in memtools (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in vramx (PyPI)
2 compromised versions
- Jul 16, 2025
Malicious code in memlib (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in logghelper (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in testcatplzignore (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in python-uvicorn (PyPI)
4 compromised versions
- Jul 16, 2025
Malicious code in npmdeco (npm)
1 compromised version
- Jul 16, 2025
Malicious code in datadog-instrumentations (npm)
2 compromised versions
- Jul 16, 2025
Malicious code in router-parse (npm)
- Jul 16, 2025
Malware in router-parse
1 compromised version
- Jul 16, 2025
Malware in target_user_list
1 compromised version
- Jul 16, 2025
Malware in @3kali182/angular-1.6
1 compromised version
- Jul 16, 2025
Malware in @3kali182/selenium-webdriver4
1 compromised version
- Jul 16, 2025
Malware in coverage-v8
1 compromised version
- Jul 16, 2025
Malware in rollup-linux-riscv64-gnu
1 compromised version
- Jul 16, 2025
Malware in dom-navigation
1 compromised version
- Jul 16, 2025
Malicious code in okta-core-component (npm)
- Jul 16, 2025
Malicious code in cwttools1 (npm)
1 compromised version
- Jul 16, 2025
Malicious code in hrxtable (npm)
6 compromised versions
- Jul 16, 2025
Malicious code in blocknote-editor (npm)
8 compromised versions
- Jul 16, 2025
Malicious code in @hub-la/payments-proto (npm)
1 compromised version
- Jul 16, 2025
Malicious code in iscc-flag (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku1-rce (PyPI)
1 compromised version
- Jul 16, 2025
Malicious code in anku2-rce (PyPI)
2 compromised versions
- Jul 16, 2025
Malicious code in xeno-code (npm)
- Jul 16, 2025
Malware in xeno-code
1 compromised version
- Jul 16, 2025
Malicious code in yxt-open-data (npm)
1 compromised version
- Jul 16, 2025
Malicious code in rollup-linux-riscv64-gnu (npm)
- Jul 16, 2025
Malicious code in ifood-companies-manager-front (npm)
1 compromised version
- Jul 16, 2025
Malicious code in catalyst_lib (npm)
2 compromised versions
- Jul 15, 2025
Malicious code in zeus-mex-profile-viz (npm)
- Jul 15, 2025
Malicious code in @web-kit-package/grab-login (npm)
- Jul 15, 2025
Malicious code in @gdstudio/web-loader (npm)
- Jul 15, 2025
Malicious code in @gdcorp-digitalcare/ux-common (npm)
- Jul 15, 2025
Malicious code in @gdcorp-digitalcare/ux (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-router (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-page-container (npm)
- Jul 15, 2025
Malicious code in @gdcorp-commerce/cx-orders (npm)
Page 6243 of 7,293