Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 10, 2025
Malicious code in meteor-react-component (npm)
1 compromised version
- Jun 10, 2025
Malware in meteor-react-component
1 compromised version
- Jun 10, 2025
Malicious code in media-recorder-polyfill (npm)
1 compromised version
- Jun 10, 2025
Malware in media-recorder-polyfill
1 compromised version
- Jun 10, 2025
Malicious code in lubridate (npm)
1 compromised version
- Jun 10, 2025
Malware in lubridate
1 compromised version
- Jun 10, 2025
Malicious code in listenv (npm)
1 compromised version
- Jun 10, 2025
Malware in listenv
1 compromised version
- Jun 10, 2025
Malicious code in libxslt1-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libxslt1-dev
1 compromised version
- Jun 10, 2025
Malicious code in libxml2-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libxml2-dev
1 compromised version
- Jun 10, 2025
Malicious code in libssl-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in libssl-dev
1 compromised version
- Jun 10, 2025
Malicious code in libp11 (npm)
1 compromised version
- Jun 10, 2025
Malware in libp11
1 compromised version
- Jun 10, 2025
Malicious code in libffi-dev (npm)
1 compromised version
- Jun 10, 2025
Malware in npm package libffi-dev
1 compromised version
- Jun 10, 2025
Malicious code in knn-kdtreejs (npm)
1 compromised version
- Jun 10, 2025
Malware in knn-kdtreejs
1 compromised version
- Jun 10, 2025
Malicious code in keypress-win (npm)
1 compromised version
- Jun 10, 2025
Malware in keypress-win
1 compromised version
- Jun 10, 2025
Malicious code in karma-spec-filter (npm)
1 compromised version
- Jun 10, 2025
Malware in karma-spec-filter
1 compromised version
- Jun 10, 2025
Malicious code in javascript-heap (npm)
1 compromised version
- Jun 10, 2025
Malware in javascript-heap
1 compromised version
- Jun 10, 2025
Malicious code in jasmine-marbers (npm)
1 compromised version
- Jun 10, 2025
Malware in jasmine-marbers
1 compromised version
- Jun 10, 2025
Malware in iot-sdk-device-client-rest-api
1 compromised version
- Jun 10, 2025
Malware in educational-depconf-poc
1 compromised version
- Jun 10, 2025
Malicious code in import-remotes (npm)
1 compromised version
- Jun 10, 2025
Malware in import-remotes
1 compromised version
- Jun 10, 2025
Malicious code in iceberg-api (npm)
1 compromised version
- Jun 10, 2025
Malware in iceberg-api
1 compromised version
- Jun 10, 2025
Malicious code in gunicorn (npm)
1 compromised version
- Jun 10, 2025
Malware in gunicorn
1 compromised version
- Jun 10, 2025
Malicious code in google-auth-httplib2 (npm)
1 compromised version
- Jun 10, 2025
Malware in google-auth-httplib2
1 compromised version
- Jun 10, 2025
Malicious code in espresso-idling-resource (npm)
1 compromised version
- Jun 10, 2025
Malware in espresso-idling-resource
1 compromised version
- Jun 10, 2025
Malicious code in eslint-parser-vue (npm)
1 compromised version
- Jun 10, 2025
Malware in eslint-parser-vue
1 compromised version
- Jun 10, 2025
Malicious code in ember-reactive-decorators (npm)
1 compromised version
- Jun 10, 2025
Malware in ember-reactive-decorators
1 compromised version
- Jun 10, 2025
Malicious code in email-ext (npm)
1 compromised version
- Jun 10, 2025
Malware in email-ext
1 compromised version
- Jun 10, 2025
Malicious code in electron-streams (npm)
1 compromised version
- Jun 10, 2025
Malware in electron-streams
1 compromised version
- Jun 10, 2025
Malicious code in dpts (npm)
1 compromised version
- Jun 10, 2025
Malware in dpts
1 compromised version
Page 6288 of 7,293