Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 15, 2025
Malicious code in pagumagu (npm)
1 compromised version
- Jun 15, 2025
Malicious code in z0ra-helper (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zora1abs-protoc01-sdk (npm)
2 compromised versions
- Jun 15, 2025
Malicious code in automated-native-creatives (npm)
1 compromised version
- Jun 15, 2025
Malicious code in comp-base-login (npm)
1 compromised version
- Jun 15, 2025
Malicious code in utils-peak (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zora1abs-co1ns-sdk (npm)
1 compromised version
- Jun 15, 2025
Malicious code in zora-exploit-payload (npm)
1 compromised version
- Jun 14, 2025
Malicious code in snapshot-server (npm)
1 compromised version
- Jun 14, 2025
Malicious code in com.unity.dt.app-ui (npm)
2 compromised versions
- Jun 14, 2025
Malicious code in owncloud-activity (npm)
2 compromised versions
- Jun 14, 2025
Malicious code in typescript-aurelia-api (npm)
1 compromised version
- Jun 14, 2025
Malicious code in mw-remote (npm)
1 compromised version
- Jun 14, 2025
Malicious code in routerprovider (npm)
1 compromised version
- Jun 14, 2025
Malicious code in customdropdownadapter (npm)
1 compromised version
- Jun 14, 2025
Malicious code in zamino (PyPI)
2 compromised versions
- Jun 14, 2025
Malicious code in sorex (PyPI)
9 compromised versions
- Jun 14, 2025
Malicious code in plugin-proposal-private-methods (npm)
2 compromised versions
- Jun 14, 2025
Malicious code in nextcloudpi (npm)
- Jun 13, 2025
Malicious code in natumatu (npm)
- Jun 13, 2025
Malicious code in aristotle-fetcher (npm)
- Jun 13, 2025
Malicious code in @evoplay-spinential/poc-rce (npm)
- Jun 13, 2025
Malicious code in @evoplay-spinential/test-module (npm)
- Jun 13, 2025
Malicious code in requests-json-overview-pkg (npm)
- Jun 13, 2025
Malicious code in wmreact-p13n (npm)
- Jun 13, 2025
Malicious code in station-signal-client-lib (npm)
- Jun 13, 2025
Malicious code in ist-schemas (npm)
- Jun 13, 2025
Malicious code in requests-json-overview (npm)
- Jun 13, 2025
Malicious code in eyeblue1 (npm)
1 compromised version
- Jun 13, 2025
Malicious code in mdp-client (npm)
1 compromised version
- Jun 13, 2025
Malicious code in soufianewldnass (npm)
1 compromised version
- Jun 13, 2025
Malicious code in maxdome-compute (npm)
2 compromised versions
- Jun 13, 2025
Malicious code in justanything (PyPI)
4 compromised versions
- Jun 13, 2025
Malicious code in doverius (PyPI)
1 compromised version
- Jun 13, 2025
Malicious code in react-sdk-module-api (npm)
1 compromised version
- Jun 13, 2025
Malicious code in ls-onboarding-frontend (npm)
1 compromised version
- Jun 13, 2025
Malicious code in my-not-confused-package (npm)
6 compromised versions
- Jun 13, 2025
Malicious code in secure-lib (npm)
1 compromised version
- Jun 13, 2025
Malicious code in react-redux-hydra (npm)
- Jun 13, 2025
Malicious code in universal-media-player (npm)
2 compromised versions
- Jun 13, 2025
Malicious code in react-card-security-code (npm)
- Jun 13, 2025
Malicious code in react-expiry-date (npm)
3 compromised versions
- Jun 13, 2025
Malicious code in plonkscript-vscode (npm)
1 compromised version
- Jun 13, 2025
Malicious code in plonkscript-ui-project (npm)
1 compromised version
- Jun 13, 2025
Malicious code in passeiaqui (npm)
- Jun 13, 2025
Malicious code in recoil-handler (npm)
- Jun 13, 2025
Malicious code in sitewidesearch-client (npm)
6 compromised versions
- Jun 13, 2025
Malicious code in michael0x44hackone (npm)
- Jun 13, 2025
Malicious code in mi-permission (npm)
- Jun 13, 2025
Malicious code in mypocmaliciouspackage-cursorpt1 (npm)
Page 6281 of 7,293