Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 23, 2025
Malware in audible-react-assets
1 compromised version
- Jun 23, 2025
Malware in integromat-iml
1 compromised version
- Jun 23, 2025
Malware in integromat-udt
1 compromised version
- Jun 23, 2025
Malware in masonry-thingies.js
1 compromised version
- Jun 23, 2025
Malware in mydummyproject-zyp
1 compromised version
- Jun 23, 2025
Malware in lucca-sdk
1 compromised version
- Jun 23, 2025
Malicious code in websdk-colours (npm)
- Jun 23, 2025
Malicious code in portal-frontend-helpers (npm)
- Jun 23, 2025
Malicious code in localstorage-retry (npm)
- Jun 23, 2025
Malicious code in k00h (npm)
- Jun 23, 2025
Malicious code in gs_isotope-layout (npm)
- Jun 23, 2025
Malicious code in fix3 (npm)
- Jun 23, 2025
Malicious code in feature-repeaters (npm)
- Jun 23, 2025
Malicious code in by-category (npm)
- Jun 23, 2025
Malicious code in bundle-text (npm)
- Jun 23, 2025
Malicious code in art19-web-player (npm)
- Jun 23, 2025
Malicious code in applinks (npm)
- Jun 23, 2025
Malicious code in 84f2 (npm)
- Jun 23, 2025
Malware in bundle-text
1 compromised version
- Jun 23, 2025
Malware in portal-frontend-helpers
1 compromised version
- Jun 23, 2025
Malware in by-category
1 compromised version
- Jun 23, 2025
Malware in websdk-colours
1 compromised version
- Jun 23, 2025
Malware in gs_isotope-layout
1 compromised version
- Jun 23, 2025
Malware in feature-repeaters
1 compromised version
- Jun 23, 2025
Malware in k00h
1 compromised version
- Jun 23, 2025
Malware in localstorage-retry
1 compromised version
- Jun 23, 2025
Malware in applinks
1 compromised version
- Jun 23, 2025
Malware in art19-web-player
1 compromised version
- Jun 23, 2025
Malware in 84f2
1 compromised version
- Jun 23, 2025
Malware in fix3
1 compromised version
- Jun 23, 2025
Malicious code in nf-cl-logger-logger (npm)
2 compromised versions
- Jun 23, 2025
Malicious code in masonry-thingies.js (npm)
- Jun 23, 2025
Malicious code in jridgewell-resolve-uri-latest (npm)
2 compromised versions
- Jun 23, 2025
Malicious code in pretty-formatter (npm)
- Jun 23, 2025
Malware in react-sdk-module-api
1 compromised version
- Jun 23, 2025
Malware in nitro-contracts
1 compromised version
- Jun 23, 2025
Malware in composer-bin-plugin
1 compromised version
- Jun 23, 2025
Malware in owncloud-activity
1 compromised version
- Jun 23, 2025
Malware in compound-design-tokens
1 compromised version
- Jun 23, 2025
Malware in pretty-formatter
1 compromised version
- Jun 23, 2025
Malware in plugin-proposal-private-methods
1 compromised version
- Jun 23, 2025
Malware in plugin-react
1 compromised version
- Jun 23, 2025
Malicious code in strict-csp-builder (npm)
2 compromised versions
- Jun 22, 2025
Malicious code in hashidf (PyPI)
3 compromised versions
- Jun 22, 2025
Malicious code in red-bull-venue-tools (npm)
1 compromised version
- Jun 22, 2025
Malicious code in nitro-contracts (npm)
- Jun 22, 2025
Malicious code in mydummyproject-zyp (npm)
1 compromised version
- Jun 22, 2025
Malicious code in lucca-sdk (npm)
7 compromised versions
- Jun 22, 2025
Malicious code in handelsblatt-hypesignals-ui-components (npm)
1 compromised version
- Jun 22, 2025
Malicious code in spokeo (PyPI)
2 compromised versions
Page 6272 of 7,293