Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Jun 7, 2025
Malicious code in atlasctf-21-prod-12 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-11 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-10 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-09 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-08 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-07 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-06 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-05 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-04 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-03 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-02 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-01 (PyPI)
3 compromised versions
- Jun 7, 2025
Malicious code in atlasctf-21-prod-00 (PyPI)
2 compromised versions
- Jun 7, 2025
Malicious code in bank-utils (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-logger (npm)
1 compromised version
- Jun 7, 2025
Malicious code in sess-store (npm)
1 compromised version
- Jun 7, 2025
Malicious code in sess-mgmt (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-gateway (npm)
1 compromised version
- Jun 7, 2025
Malicious code in bank-auth (npm)
1 compromised version
- Jun 7, 2025
Malicious code in pay-reconciler (npm)
1 compromised version
- Jun 7, 2025
Malicious code in fin-connector (npm)
1 compromised version
- Jun 7, 2025
Malicious code in db-prd (npm)
1 compromised version
- Jun 7, 2025
Malicious code in ml-payment (npm)
1 compromised version
- Jun 7, 2025
Malicious code in db-prod-interno (npm)
1 compromised version
- Jun 7, 2025
Malicious code in gs-payments (npm)
1 compromised version
- Jun 7, 2025
Malicious code in nginx-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in gs-payments-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in samba-core (npm)
1 compromised version
- Jun 7, 2025
Malicious code in mssql-internal (npm)
1 compromised version
- Jun 7, 2025
Malicious code in bsamba (npm)
1 compromised version
- Jun 7, 2025
Malicious code in apple-api-fake (npm)
1 compromised version
- Jun 7, 2025
Malicious code in prod-interno (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in producao (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in staging-tools (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in infra-metrics (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in internal-auth (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in prod-shared (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in dev-api-client (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in corp-config (npm)
2 compromised versions
- Jun 7, 2025
Malicious code in prd-utils (npm)
2 compromised versions
- Jun 6, 2025
Malicious code in @portal-reporting/report-ui-templates (npm)
1 compromised version
- Jun 6, 2025
Malicious code in @velorum/browser-authenticator (npm)
1 compromised version
- Jun 6, 2025
Malicious code in @yahoo-engadget/i13n (npm)
1 compromised version
- Jun 6, 2025
Malicious code in kubernetes.io (npm)
3 compromised versions
- Jun 6, 2025
Malicious code in c2pa-js (npm)
1 compromised version
- Jun 6, 2025
Malicious code in fallback-screen (npm)
1 compromised version
- Jun 6, 2025
Malicious code in tcp-app-activation-react (npm)
- Jun 6, 2025
Malicious code in ach-spa-facephi (npm)
Page 6290 of 7,293