Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Jul 21, 2025
Malicious code in donotinstallthisistest6 (PyPI)
1 compromised version
- Jul 21, 2025
Malicious code in cloud-inquisitor (npm)
- Jul 21, 2025
Malicious code in dewiz-xyz (npm)
- Jul 21, 2025
Malicious code in dewiz-xyz-protego (npm)
- Jul 21, 2025
Malicious code in indexer-worker-service (npm)
- Jul 21, 2025
Malicious code in shopify-css-import (npm)
- Jul 21, 2025
Malicious code in google-login-flow (npm)
- Jul 21, 2025
Malicious code in login-oauth (npm)
- Jul 21, 2025
Malicious code in vue4-google-auth (npm)
- Jul 21, 2025
Malicious code in set7 (PyPI)
6 compromised versions
- Jul 21, 2025
Malicious code in @toptal/picasso-utils (npm)
1 compromised version
- Jul 21, 2025
Malicious code in omulamuzi (npm)
- Jul 21, 2025
Malicious code in ochot (npm)
- Jul 21, 2025
Malicious code in ochot-odong (npm)
- Jul 21, 2025
Malicious code in axr-smart-contracts (npm)
- Jul 21, 2025
Malicious code in synckit (npm)
1 compromised version
- Jul 21, 2025
Malicious code in napi-postinstall (npm)
1 compromised version
- Jul 21, 2025
Malicious code in got-fetch (npm)
2 compromised versions
- Jul 21, 2025
Malicious code in eslint-plugin-prettier (npm)
2 compromised versions
- Jul 21, 2025
Malicious code in eslint-config-prettier (npm)
4 compromised versions
- Jul 21, 2025
Malicious code in @pkgr/core (npm)
1 compromised version
- Jul 21, 2025
Malicious code in vite-lightsparse (npm)
- Jul 21, 2025
Malware in vite-lightsparse
1 compromised version
- Jul 21, 2025
Malicious code in websyncer (npm)
3 compromised versions
- Jul 21, 2025
Malicious code in evmlogger (npm)
7 compromised versions
- Jul 21, 2025
Malware in websyncer
1 compromised version
- Jul 21, 2025
Malware in evmlogger
1 compromised version
- Jul 20, 2025
Malicious code in vite-postcss-helper (npm)
- Jul 20, 2025
Malware in vite-postcss-helper
1 compromised version
- Jul 20, 2025
Malware in okta-core-component
1 compromised version
- Jul 20, 2025
Malicious code in mooduliop (npm)
- Jul 20, 2025
Malware in mooduliop
1 compromised version
- Jul 20, 2025
Malicious code in grayavatar (npm)
- Jul 20, 2025
Malware in grayavatar
1 compromised version
- Jul 20, 2025
Malicious code in rc-logger (npm)
- Jul 20, 2025
Malware in rc-logger
1 compromised version
- Jul 20, 2025
Malicious code in config-log (npm)
- Jul 20, 2025
Malware in config-log
1 compromised version
- Jul 20, 2025
Malicious code in @nytt/sass-utils (npm)
- Jul 20, 2025
Malicious code in @toptal/picasso-quote (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-slider (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-select (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-link (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-switch (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/davinci-graphql-codegen-extensions (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-form (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-popper (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-button (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-alert (npm)
1 compromised version
- Jul 20, 2025
Malicious code in @toptal/picasso-dropdown (npm)
1 compromised version
Page 6259 of 7,312