Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jul 2, 2025
Malware in eyeblue1
1 compromised version
- Jul 2, 2025
Malware in maxdome-compute
1 compromised version
- Jul 2, 2025
Malicious code in eslint-plugin-vhtml-slptypography (npm)
- Jul 2, 2025
Malware in eslint-plugin-vhtml-slptypography
1 compromised version
- Jul 2, 2025
Malware in aristotle-fetcher
1 compromised version
- Jul 2, 2025
Malware in ist-schemas
1 compromised version
- Jul 2, 2025
Malware in station-signal-client-lib
1 compromised version
- Jul 2, 2025
Malware in requests-json-overview-pkg
1 compromised version
- Jul 2, 2025
Malware in wmreact-p13n
1 compromised version
- Jul 2, 2025
Malware in requests-json-overview
1 compromised version
- Jul 2, 2025
Malware in @zyp3_/api-ecom-errors
1 compromised version
- Jul 2, 2025
Malicious code in @type-script-node/vite (npm)
- Jul 2, 2025
Malware in @type-script-node/vite
1 compromised version
- Jul 2, 2025
Malicious code in react-babel-purify (npm)
- Jul 2, 2025
Malicious code in nextjs-babel-toastify (npm)
- Jul 2, 2025
Malware in react-babel-purify
1 compromised version
- Jul 2, 2025
Malware in nextjs-babel-toastify
1 compromised version
- Jul 2, 2025
Malicious code in ytdl-vol (npm)
- Jul 2, 2025
Malicious code in neroxbail (npm)
- Jul 2, 2025
Malware in ytdl-vol
1 compromised version
- Jul 2, 2025
Malware in neroxbail
1 compromised version
- Jul 2, 2025
Malicious code in solana-dextrade-parser (npm)
- Jul 2, 2025
Malicious code in dotenv-log (npm)
- Jul 2, 2025
Malicious code in chunk-validation (npm)
1 compromised version
- Jul 2, 2025
Malware in dotenv-log
1 compromised version
- Jul 2, 2025
Malware in solana-dextrade-parser
1 compromised version
- Jul 2, 2025
Malware in chunk-validation
1 compromised version
- Jul 2, 2025
Malware in @wh-components/icons
1 compromised version
- Jul 2, 2025
Malware in @wh-components/core
1 compromised version
- Jul 2, 2025
Malicious code in myrepotesting-main (npm)
- Jul 2, 2025
Malicious code in myrepotesting (npm)
- Jul 2, 2025
Malicious code in @pwly/powerley-utils (npm)
- Jul 2, 2025
Malware in @pwly/powerley-utils
1 compromised version
- Jul 2, 2025
Malware in myrepotesting-main
1 compromised version
- Jul 2, 2025
Malware in myrepotesting
1 compromised version
- Jul 2, 2025
Malicious code in json-cookie-jar (npm)
1 compromised version
- Jul 2, 2025
Malware in json-cookie-jar
1 compromised version
- Jul 2, 2025
Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)
- Jul 2, 2025
Malware in env-info-checker-kyy3w4fiurevd8uy43wfre
1 compromised version
- Jul 2, 2025
Malicious code in queshymouse (npm)
- Jul 2, 2025
Malicious code in queshyfrog (npm)
- Jul 2, 2025
Malicious code in bonnet-ltd (npm)
- Jul 2, 2025
Malware in bonnet-ltd
1 compromised version
- Jul 2, 2025
Malware in queshyfrog
1 compromised version
- Jul 2, 2025
Malware in queshymouse
1 compromised version
- Jul 2, 2025
Malware in @evg-ui/lib
1 compromised version
- Jul 2, 2025
Malicious code in grafana-github-datasource (npm)
1 compromised version
- Jul 2, 2025
Malicious code in rpc-selfbot (npm)
11 compromised versions
- Jul 2, 2025
Malicious code in discord-rpc-presence (npm)
- Jul 2, 2025
Malware in rpc-selfbot
1 compromised version
Page 6262 of 7,293