Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 16, 2025
Malware in react-native-google-acm
1 compromised version
- Jun 16, 2025
Malware in third-party-dep-a
1 compromised version
- Jun 16, 2025
Malicious code in raydium-sdk-v6 (npm)
- Jun 16, 2025
Malware in raydium-sdk-v6
1 compromised version
- Jun 16, 2025
Malware in @chatbot-builder/core
1 compromised version
- Jun 16, 2025
Malware in @pentestleg/core
1 compromised version
- Jun 16, 2025
Malicious code in testhelloworldfromitaly (npm)
7 compromised versions
- Jun 16, 2025
Malware in testhelloworldfromitaly
1 compromised version
- Jun 16, 2025
Malware in frontend-tests
1 compromised version
- Jun 16, 2025
Malware in base_sdk_const
1 compromised version
- Jun 16, 2025
Malware in npm-events-package
1 compromised version
- Jun 16, 2025
Malware in dc-spectrum-v3-core
1 compromised version
- Jun 16, 2025
Malware in com.meta.utilities
1 compromised version
- Jun 16, 2025
Malware in simpledep2
1 compromised version
- Jun 16, 2025
Malware in actions-languageservice
1 compromised version
- Jun 16, 2025
Malware in rosetta-primitives
1 compromised version
- Jun 16, 2025
Malware in rosetta-elements
1 compromised version
- Jun 16, 2025
Malicious code in bs58js (npm)
- Jun 16, 2025
Malware in bs58js
1 compromised version
- Jun 16, 2025
Malware in arc-offsec-header
1 compromised version
- Jun 16, 2025
Malicious code in eslint-plugin-panel-ops (npm)
12 compromised versions
- Jun 16, 2025
Malicious code in ripe-grs (npm)
1 compromised version
- Jun 16, 2025
Malicious code in vscode-spring-initializr (npm)
1 compromised version
- Jun 16, 2025
Malicious code in raise-http-server (npm)
3 compromised versions
- Jun 16, 2025
Malicious code in composer-bin-plugin (npm)
1 compromised version
- Jun 15, 2025
Malicious code in browser-history-analysis (PyPI)
1 compromised version
- Jun 15, 2025
Malicious code in browser-history-analytics (PyPI)
6 compromised versions
- Jun 15, 2025
Malicious code in wasm-wasi-core (npm)
- Jun 15, 2025
Malicious code in buck2_explain (npm)
1 compromised version
- Jun 15, 2025
Malicious code in neuroglancer-rspack-project-source (npm)
2 compromised versions
- Jun 15, 2025
Malicious code in client-vue3-dev (npm)
1 compromised version
- Jun 15, 2025
Malicious code in arc-offsec-header (npm)
7 compromised versions
- Jun 15, 2025
Malicious code in pipet-code-agent (npm)
2 compromised versions
- Jun 15, 2025
Malicious code in @glofe/bootstrap (npm)
2 compromised versions
- Jun 15, 2025
Malicious code in juno-autodiscovery-browser (npm)
4 compromised versions
- Jun 15, 2025
Malicious code in @glofe/company (npm)
4 compromised versions
- Jun 15, 2025
Malicious code in getsourcefile (npm)
1 compromised version
- Jun 15, 2025
Malicious code in symboltotypenode (npm)
1 compromised version
- Jun 15, 2025
Malicious code in com.google.play.appupdate (npm)
4 compromised versions
- Jun 15, 2025
Malicious code in pakumaku (npm)
1 compromised version
- Jun 15, 2025
Malicious code in justsupport (npm)
1 compromised version
- Jun 15, 2025
Malicious code in traceviz-angular-core (npm)
2 compromised versions
- Jun 15, 2025
Malicious code in zoralabs-mintflow-helper (npm)
4 compromised versions
- Jun 15, 2025
Malicious code in zora1abs-mintflow-helper (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zxdb (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zora1abs-protoc-helper (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zora-config-loader (npm)
- Jun 15, 2025
Malicious code in zora-metrics (npm)
- Jun 15, 2025
Malicious code in zora-logger (npm)
- Jun 15, 2025
Malicious code in newcheckout (npm)
1 compromised version
Page 6280 of 7,293