Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 10, 2025
Malicious code in babel-rule (npm)
- Jun 10, 2025
Malware in vue-coreo
1 compromised version
- Jun 10, 2025
Malware in babel-rule
1 compromised version
- Jun 10, 2025
Malware in ve-vores
1 compromised version
- Jun 10, 2025
Malware in ve-cores
1 compromised version
- Jun 10, 2025
Malicious code in base-hashing (npm)
- Jun 10, 2025
Malware in base-hashing
1 compromised version
- Jun 10, 2025
Malicious code in mediaserv-paypal (npm)
1 compromised version
- Jun 10, 2025
Malware in mediaserv-paypal
1 compromised version
- Jun 10, 2025
Malicious code in rpc-bot-v13 (npm)
- Jun 10, 2025
Malicious code in rpc-bot (npm)
- Jun 10, 2025
Malware in rpc-bot-v13
1 compromised version
- Jun 10, 2025
Malware in rpc-bot
1 compromised version
- Jun 10, 2025
Malicious code in @loybung/weather-api (npm)
- Jun 10, 2025
Malicious code in @loybung/unicode-fonts (npm)
- Jun 10, 2025
Malicious code in @loybung/provider-loader (npm)
- Jun 10, 2025
Malicious code in @loybung/inject (npm)
- Jun 10, 2025
Malicious code in @loybung/hyper-client (npm)
- Jun 10, 2025
Malicious code in @loybung/dous (npm)
- Jun 10, 2025
Malware in @loybung/hyper-client
1 compromised version
- Jun 10, 2025
Malware in @loybung/weather-api
1 compromised version
- Jun 10, 2025
Malware in @loybung/inject
1 compromised version
- Jun 10, 2025
Malware in @loybung/unicode-fonts
1 compromised version
- Jun 10, 2025
Malware in @loybung/dous
1 compromised version
- Jun 10, 2025
Malware in @loybung/provider-loader
1 compromised version
- Jun 10, 2025
Malicious code in @loybung/weatherapi (npm)
- Jun 10, 2025
Malicious code in @loybung/utils (npm)
- Jun 10, 2025
Malicious code in @loybung/textreplace (npm)
- Jun 10, 2025
Malicious code in @loybung/textfont (npm)
- Jun 10, 2025
Malicious code in @loybung/systeminfo (npm)
- Jun 10, 2025
Malicious code in @loybung/rdcw-slipverify (npm)
- Jun 10, 2025
Malicious code in @loybung/launcher (npm)
- Jun 10, 2025
Malicious code in @loybung/encode (npm)
- Jun 10, 2025
Malicious code in @loybung/emoji (npm)
- Jun 10, 2025
Malicious code in @loybung/discohook (npm)
- Jun 10, 2025
Malware in @loybung/emoji
1 compromised version
- Jun 10, 2025
Malware in @loybung/rdcw-slipverify
1 compromised version
- Jun 10, 2025
Malware in @loybung/systeminfo
1 compromised version
- Jun 10, 2025
Malware in @loybung/textreplace
1 compromised version
- Jun 10, 2025
Malware in @loybung/launcher
1 compromised version
- Jun 10, 2025
Malware in @loybung/weatherapi
1 compromised version
- Jun 10, 2025
Malware in @loybung/textfont
1 compromised version
- Jun 10, 2025
Malware in @loybung/encode
1 compromised version
- Jun 10, 2025
Malware in @loybung/discohook
1 compromised version
- Jun 10, 2025
Malware in @loybung/utils
1 compromised version
- Jun 10, 2025
Malicious code in soracom-xmas-pi (npm)
1 compromised version
- Jun 10, 2025
Malicious code in pullapprove-alt (npm)
1 compromised version
- Jun 10, 2025
Malicious code in opensearch-with-grafana-lambdas (npm)
1 compromised version
- Jun 10, 2025
Malware in soracom-xmas-pi
1 compromised version
- Jun 10, 2025
Malware in pullapprove-alt
1 compromised version
Page 6285 of 7,293