Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 27, 2025
Malware in symphony-binary-confusion-matrix
1 compromised version
- May 27, 2025
Malware in blahblahblah-definitely-not-a-real-package-name
1 compromised version
- May 27, 2025
Malware in @tribal-worldwide-london/fa-api-service
1 compromised version
- May 27, 2025
Malicious code in bandwith-sdk (npm)
1 compromised version
- May 27, 2025
Malicious code in andes-landings (npm)
1 compromised version
- May 27, 2025
Malicious code in @cyb3rsh4ykh/neondatabase (npm)
1 compromised version
- May 27, 2025
Malware in pog-ui-landings-library
1 compromised version
- May 27, 2025
Malware in andes-landings
1 compromised version
- May 27, 2025
Malware in bandwith-sdk
1 compromised version
- May 27, 2025
Malware in spingroup
1 compromised version
- May 27, 2025
Malware in @cyb3rsh4ykh/neondatabase
1 compromised version
- May 27, 2025
Malicious code in front-exporter (npm)
1 compromised version
- May 27, 2025
Malicious code in firefox-screenshots (npm)
3 compromised versions
- May 27, 2025
Malware in compensation-calculator
1 compromised version
- May 27, 2025
Malware in front-exporter
1 compromised version
- May 27, 2025
Malware in coreapi-export-template
1 compromised version
- May 27, 2025
Malware in firefox-screenshots
1 compromised version
- May 27, 2025
Malware in madddterialxtest
1 compromised version
- May 27, 2025
Malware in dojo_10
1 compromised version
- May 27, 2025
Malware in maddddddterialxtest
1 compromised version
- May 27, 2025
Malware in wrapper6
1 compromised version
- May 27, 2025
Malware in ideals-theming
1 compromised version
- May 27, 2025
Malware in ideals-services
1 compromised version
- May 27, 2025
Malware in ideals-models
1 compromised version
- May 27, 2025
Malware in ideals-ui-components
1 compromised version
- May 27, 2025
Malware in ideals-utils
1 compromised version
- May 27, 2025
Malware in ideals-types
1 compromised version
- May 27, 2025
Malware in ideals-views
1 compromised version
- May 27, 2025
Malicious code in athira-windows-x64 (npm)
- May 27, 2025
Malicious code in athira-windows-arm64 (npm)
- May 27, 2025
Malicious code in athira (npm)
- May 27, 2025
Malware in athira-windows-x64
1 compromised version
- May 27, 2025
Malware in athira
1 compromised version
- May 27, 2025
Malware in athira-windows-arm64
1 compromised version
- May 27, 2025
Malicious code in thira (npm)
- May 27, 2025
Malicious code in skinnyvans-windows-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-windows-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans-linux-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-linux-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans-darwin-x64 (npm)
- May 27, 2025
Malicious code in skinnyvans-darwin-arm64 (npm)
- May 27, 2025
Malicious code in skinnyvans (npm)
- May 27, 2025
Malicious code in microbundle-starter (npm)
- May 27, 2025
Malicious code in athira-linux-x64 (npm)
- May 27, 2025
Malicious code in athira-linux-arm64 (npm)
- May 27, 2025
Malicious code in athira-darwin-x64 (npm)
- May 27, 2025
Malicious code in athira-darwin-arm64 (npm)
- May 27, 2025
Malware in athira-darwin-arm64
1 compromised version
- May 27, 2025
Malware in athira-linux-x64
1 compromised version
- May 27, 2025
Malware in skinnyvans-darwin-arm64
1 compromised version
Page 6298 of 7,293