Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Jul 2, 2025
Malware in commonjs-package
1 compromised version
- Jul 2, 2025
Malware in dynamic-importer2
1 compromised version
- Jul 2, 2025
Malware in dynamic-target
1 compromised version
- Jul 2, 2025
Malware in dynamic-stealer
1 compromised version
- Jul 2, 2025
Malware in azure-sentinel
1 compromised version
- Jul 2, 2025
Malware in blurmph
1 compromised version
- Jul 2, 2025
Malicious code in score-tools (npm)
- Jul 2, 2025
Malware in score-tools
1 compromised version
- Jul 2, 2025
Malicious code in supply-frontend-runtime (npm)
1 compromised version
- Jul 2, 2025
Malicious code in rgl-transitions-library (npm)
1 compromised version
- Jul 2, 2025
Malicious code in realtime-client-lib (npm)
- Jul 2, 2025
Malicious code in notifications-item (npm)
1 compromised version
- Jul 2, 2025
Malicious code in melichat-sdk (npm)
1 compromised version
- Jul 2, 2025
Malicious code in identification-card-component (npm)
1 compromised version
- Jul 2, 2025
Malicious code in frontend-env (npm)
1 compromised version
- Jul 2, 2025
Malicious code in frontend-device_detection (npm)
1 compromised version
- Jul 2, 2025
Malicious code in fneves-my-test-poc2 (npm)
1 compromised version
- Jul 2, 2025
Malicious code in fneves-my-test-poc (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-node_utils (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-node_stream (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-network (npm)
1 compromised version
- Jul 2, 2025
Malicious code in display-fetch_stream (npm)
1 compromised version
- Jul 2, 2025
Malicious code in checkout-off-form-validation (npm)
1 compromised version
- Jul 2, 2025
Malware in display-fetch_stream
1 compromised version
- Jul 2, 2025
Malware in supply-frontend-runtime
1 compromised version
- Jul 2, 2025
Malware in display-network
1 compromised version
- Jul 2, 2025
Malware in frontend-env
1 compromised version
- Jul 2, 2025
Malware in checkout-off-form-validation
1 compromised version
- Jul 2, 2025
Malware in frontend-device_detection
1 compromised version
- Jul 2, 2025
Malware in display-node_stream
1 compromised version
- Jul 2, 2025
Malware in fneves-my-test-poc2
1 compromised version
- Jul 2, 2025
Malware in identification-card-component
1 compromised version
- Jul 2, 2025
Malware in rgl-transitions-library
1 compromised version
- Jul 2, 2025
Malware in realtime-client-lib
1 compromised version
- Jul 2, 2025
Malware in display-node_utils
1 compromised version
- Jul 2, 2025
Malware in notifications-item
1 compromised version
- Jul 2, 2025
Malware in fneves-my-test-poc
1 compromised version
- Jul 2, 2025
Malware in melichat-sdk
1 compromised version
- Jul 2, 2025
Malware in datanerd
1 compromised version
- Jul 2, 2025
Malicious code in node-mongoose-orm (npm)
- Jul 1, 2025
Malicious code in ember-routing-htmlbars (npm)
1 compromised version
- Jul 1, 2025
Malicious code in github-datasource (npm)
2 compromised versions
- Jul 1, 2025
Malicious code in babel-plugin-nordic-module-resolver (npm)
1 compromised version
- Jul 1, 2025
Malicious code in videoel (npm)
1 compromised version
- Jul 1, 2025
Malicious code in rehttps (PyPI)
2 compromised versions
- Jul 1, 2025
Malicious code in walletutility (PyPI)
1 compromised version
- Jul 1, 2025
Malicious code in walletsutils (PyPI)
1 compromised version
- Jul 1, 2025
Malicious code in walletsdk (PyPI)
1 compromised version
- Jul 1, 2025
Malicious code in wallet-utils (PyPI)
1 compromised version
- Jul 1, 2025
Malicious code in utilswallet (PyPI)
1 compromised version
Page 6264 of 7,293