Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Jul 12, 2025
Malicious code in @blocks-shared/desktop-title (npm)
- Jul 11, 2025
Malicious code in gramapi (PyPI)
3 compromised versions
- Jul 11, 2025
Malicious code in puregram (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in groq-link2 (npm)
2 compromised versions
- Jul 11, 2025
Malicious code in @lensapp/eslint-config (npm)
1 compromised version
- Jul 11, 2025
Malicious code in tronpyapi (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in @3kali182/angular-1.6 (npm)
1 compromised version
- Jul 11, 2025
Malicious code in seclab-research-depconf-test (PyPI)
2 compromised versions
- Jul 11, 2025
Malicious code in coverage-v8 (npm)
1 compromised version
- Jul 11, 2025
Malicious code in dbindicator (PyPI)
2 compromised versions
- Jul 11, 2025
Malicious code in node-db-indicator (PyPI)
1 compromised version
- Jul 11, 2025
Malicious code in @pwa-ib/eslint-plugin-compat (npm)
1 compromised version
- Jul 11, 2025
Malicious code in @h1shiny/ismobile (npm)
1 compromised version
- Jul 11, 2025
Malicious code in preview-server-auth-bounty (npm)
- Jul 10, 2025
Malicious code in gpu-free-ai (PyPI)
2 compromised versions
- Jul 10, 2025
Malicious code in preset-log (npm)
- Jul 10, 2025
Malware in preset-log
1 compromised version
- Jul 10, 2025
Malicious code in dtcp-module (npm)
1 compromised version
- Jul 10, 2025
Malware in dtcp-module
1 compromised version
- Jul 10, 2025
Malware in sdk.babeltest
1 compromised version
- Jul 10, 2025
Malware in sdk.babelhelpz
1 compromised version
- Jul 10, 2025
Malware in byaziine_validator
1 compromised version
- Jul 10, 2025
Malicious code in rita-remoteista (npm)
1 compromised version
- Jul 10, 2025
Malicious code in esign-frontend (npm)
1 compromised version
- Jul 10, 2025
Malware in rita-remoteista
1 compromised version
- Jul 10, 2025
Malware in @subdashboard/shared
1 compromised version
- Jul 10, 2025
Malware in esign-frontend
1 compromised version
- Jul 10, 2025
Malicious code in tyrtle (npm)
- Jul 10, 2025
Malicious code in teeble (npm)
- Jul 10, 2025
Malicious code in supabase-react (npm)
- Jul 10, 2025
Malicious code in sandbox-plugin (npm)
- Jul 10, 2025
Malicious code in sample-nuxtjs (npm)
- Jul 10, 2025
Malicious code in pkgsite (npm)
- Jul 10, 2025
Malicious code in jquery-zoomer (npm)
- Jul 10, 2025
Malicious code in hubspot-cms-deploy (npm)
- Jul 10, 2025
Malicious code in grallama (npm)
- Jul 10, 2025
Malicious code in dradis (npm)
- Jul 10, 2025
Malicious code in comment-on-task-github-action (npm)
- Jul 10, 2025
Malware in sandbox-plugin
1 compromised version
- Jul 10, 2025
Malware in grallama
1 compromised version
- Jul 10, 2025
Malware in jquery-zoomer
1 compromised version
- Jul 10, 2025
Malware in workflows-templates
1 compromised version
- Jul 10, 2025
Malware in supabase-react
1 compromised version
- Jul 10, 2025
Malware in cmr-stac
1 compromised version
- Jul 10, 2025
Malware in cmr-graphql
1 compromised version
- Jul 10, 2025
Malware in sample-nuxtjs
1 compromised version
- Jul 10, 2025
Malware in teeble
1 compromised version
- Jul 10, 2025
Malware in tyrtle
1 compromised version
- Jul 10, 2025
Malware in workflows-template
1 compromised version
- Jul 10, 2025
Malware in hubspot-cms-deploy
1 compromised version
Page 6251 of 7,293