Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,015 total · sorted newest first- Jul 10, 2025
Malware in @paysafe-consumer/authentication
1 compromised version
- Jul 10, 2025
Malware in bazel-kotlin
1 compromised version
- Jul 10, 2025
Malware in epic-mw
1 compromised version
- Jul 10, 2025
Malware in @frontend-clients/wallet-web
1 compromised version
- Jul 10, 2025
Malware in @frontend-clients/core
1 compromised version
- Jul 10, 2025
Malicious code in dex-core-v2 (npm)
- Jul 10, 2025
Malware in lz-evm-sdk-v1
1 compromised version
- Jul 10, 2025
Malware in dex-core-v2
1 compromised version
- Jul 10, 2025
Malware in oft-evm
1 compromised version
- Jul 10, 2025
Malware in lz-evm-protocol-v2
1 compromised version
- Jul 10, 2025
Malicious code in @blocks-shared/atom-panel (npm)
1 compromised version
- Jul 10, 2025
Malicious code in npmrcetest (npm)
1 compromised version
- Jul 10, 2025
Malicious code in os-apps-ui-creative-manager (npm)
1 compromised version
- Jul 10, 2025
Malicious code in @shadowmonarchx/eslint_plugin_react (npm)
1 compromised version
- Jul 10, 2025
Malicious code in os-apps-ui-traffic-manager (npm)
2 compromised versions
- Jul 10, 2025
Malicious code in dep-confusion-poc-monke (npm)
- Jul 10, 2025
Malicious code in ec2-github-runner (npm)
- Jul 10, 2025
Malware in ec2-github-runner
1 compromised version
- Jul 10, 2025
Malicious code in tv-app (npm)
- Jul 10, 2025
Malicious code in sqltools-kusto-driver (npm)
- Jul 10, 2025
Malicious code in nmig (npm)
- Jul 10, 2025
Malicious code in k6-studio-ui-components (npm)
- Jul 10, 2025
Malicious code in intel-telemetry (npm)
- Jul 10, 2025
Malicious code in intel-gdb-helpers (npm)
- Jul 10, 2025
Malicious code in imx-core-sdk (npm)
- Jul 10, 2025
Malicious code in grafana-zabbix (npm)
- Jul 10, 2025
Malicious code in grafana-polystat-panel (npm)
- Jul 10, 2025
Malicious code in grafana-csv-datasource (npm)
- Jul 10, 2025
Malicious code in dt-internal-linter (npm)
- Jul 10, 2025
Malicious code in dt-automation-core (npm)
- Jul 10, 2025
Malicious code in dependabot-ruleset-runner (npm)
- Jul 10, 2025
Malicious code in clock-panel (npm)
- Jul 10, 2025
Malicious code in azure-prometheus-datasource (npm)
- Jul 10, 2025
Malicious code in azure-data-explorer-datasource (npm)
- Jul 10, 2025
Malicious code in astradb-datasource (npm)
- Jul 10, 2025
Malware in dt-internal-linter
1 compromised version
- Jul 10, 2025
Malware in intel-gdb-helpers
1 compromised version
- Jul 10, 2025
Malware in dt-automation-core
1 compromised version
- Jul 10, 2025
Malware in sqltools-kusto-driver
1 compromised version
- Jul 10, 2025
Malware in azure-data-explorer-datasource
1 compromised version
- Jul 10, 2025
Malware in sentry-eslint-config-internal
1 compromised version
- Jul 10, 2025
Malware in nmig
1 compromised version
- Jul 10, 2025
Malware in tv-app
1 compromised version
- Jul 10, 2025
Malware in imx-core-sdk
1 compromised version
- Jul 10, 2025
Malware in grafana-polystat-panel
1 compromised version
- Jul 10, 2025
Malware in clock-panel
1 compromised version
- Jul 10, 2025
Malware in astradb-datasource
1 compromised version
- Jul 10, 2025
Malware in github-datasource
1 compromised version
- Jul 10, 2025
Malware in intel-telemetry
1 compromised version
- Jul 10, 2025
Malware in dynatrace-test-automation
1 compromised version
Page 6260 of 7,301