Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Jul 22, 2025
Malicious code in dependabot-auto-triage (npm)
- Jul 22, 2025
Malicious code in aws-iot-twinmaker-grafana-utils (npm)
- Jul 22, 2025
Malware in scenes-core
1 compromised version
- Jul 22, 2025
Malware in lint-pr-title
1 compromised version
- Jul 22, 2025
Malware in scenes-testing
1 compromised version
- Jul 22, 2025
Malware in scenes-devtools
1 compromised version
- Jul 22, 2025
Malware in aws-iot-twinmaker-grafana-utils
1 compromised version
- Jul 22, 2025
Malware in plugin-meta-extractor
1 compromised version
- Jul 22, 2025
Malware in scenes-e2e
1 compromised version
- Jul 22, 2025
Malware in grafana-scenes-ml
1 compromised version
- Jul 22, 2025
Malware in get-latest-workflow-artifact
1 compromised version
- Jul 22, 2025
Malware in cmc-core
1 compromised version
- Jul 22, 2025
Malware in dependabot-auto-triage
1 compromised version
- Jul 22, 2025
Malicious code in tfjs-vis (npm)
1 compromised version
- Jul 22, 2025
Malicious code in tfjs-backend-nodegl (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in taxify-business-portal (npm)
- Jul 22, 2025
Malicious code in simple-line-icons-webpack (npm)
8 compromised versions
- Jul 22, 2025
Malicious code in ppsdkconstants (npm)
1 compromised version
- Jul 22, 2025
Malicious code in nf-graph-examples (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in mozilla-l10n-docs-linter (npm)
- Jul 22, 2025
Malicious code in fathom-fox (npm)
2 compromised versions
- Jul 22, 2025
Malicious code in community-pass-react-native-wrapper (npm)
4 compromised versions
- Jul 22, 2025
Malicious code in airbnb-shims (npm)
5 compromised versions
- Jul 22, 2025
Malicious code in airbnb-javascript (npm)
- Jul 22, 2025
Malicious code in airbnb-api-resource (npm)
3 compromised versions
- Jul 22, 2025
Malicious code in @verge-vcl-react/empty-state (npm)
9 compromised versions
- Jul 22, 2025
Malicious code in @verge-vcl-react/data-grid (npm)
8 compromised versions
- Jul 22, 2025
Malware in simple-line-icons-webpack
1 compromised version
- Jul 22, 2025
Malware in airbnb-javascript
1 compromised version
- Jul 22, 2025
Malware in mozilla-l10n-docs-linter
1 compromised version
- Jul 22, 2025
Malware in @verge-vcl-react/data-grid
1 compromised version
- Jul 22, 2025
Malware in nf-graph-examples
1 compromised version
- Jul 22, 2025
Malware in taxify-business-portal
1 compromised version
- Jul 22, 2025
Malware in fathom-fox
1 compromised version
- Jul 22, 2025
Malware in tfjs-backend-nodegl
1 compromised version
- Jul 22, 2025
Malware in tfjs-vis
1 compromised version
- Jul 22, 2025
Malware in ppsdkconstants
1 compromised version
- Jul 22, 2025
Malware in airbnb-api-resource
1 compromised version
- Jul 22, 2025
Malware in @verge-vcl-react/empty-state
1 compromised version
- Jul 22, 2025
Malware in airbnb-shims
1 compromised version
- Jul 22, 2025
Malware in community-pass-react-native-wrapper
1 compromised version
- Jul 22, 2025
Malicious code in @lain-test-org/test-package2 (npm)
- Jul 22, 2025
Malicious code in @lain-test-org/test-package (npm)
- Jul 22, 2025
Malware in @lain-test-org/test-package2
1 compromised version
- Jul 22, 2025
Malware in @rupahealth/design
1 compromised version
- Jul 22, 2025
Malware in @lain-test-org/test-package
1 compromised version
- Jul 22, 2025
Malicious code in axios-hehe (npm)
11 compromised versions
- Jul 22, 2025
Malware in axios-hehe
1 compromised version
- Jul 21, 2025
Malicious code in testpackageroietest4 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in donotinstallthisistest5 (PyPI)
1 compromised version
Page 6258 of 7,312