Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 23, 2025
Malicious code in node-window-rendering (npm)
1 compromised version
- May 23, 2025
Malicious code in lcs-sistic-integration (npm)
1 compromised version
- May 23, 2025
Malware in lcs-sistic-integration
1 compromised version
- May 23, 2025
Malware in node-window-rendering
1 compromised version
- May 23, 2025
Malware in url-project
1 compromised version
- May 23, 2025
Malicious code in dev.voltstro.unitywebbrowser (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.multiplayer.tools (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.ml-agents (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.live-capture (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.cloud.common (npm)
1 compromised version
- May 23, 2025
Malicious code in blog-client (npm)
1 compromised version
- May 23, 2025
Malicious code in @elementor-editor-github-actions/utils (npm)
1 compromised version
- May 23, 2025
Malicious code in @demoability/loadgen-core (npm)
2 compromised versions
- May 23, 2025
Malware in dev.voltstro.unitywebbrowser
1 compromised version
- May 23, 2025
Malware in gear-idea-indexer-db
1 compromised version
- May 23, 2025
Malware in com.unity.visualeffectgraph
1 compromised version
- May 23, 2025
Malware in blog-client
1 compromised version
- May 23, 2025
Malware in com.unity.rendering.light-transport
1 compromised version
- May 23, 2025
Malware in com.unity.robotics.warehouse.base
1 compromised version
- May 23, 2025
Malware in com.unity.live-capture
1 compromised version
- May 23, 2025
Malware in gear-idea-common
1 compromised version
- May 23, 2025
Malware in com.unity.furioos-connection-kit
1 compromised version
- May 23, 2025
Malware in com.unity.cloud.common
1 compromised version
- May 23, 2025
Malware in @demoability/loadgen-core
1 compromised version
- May 23, 2025
Malware in @elementor-editor-github-actions/utils
1 compromised version
- May 23, 2025
Malware in com.unity.perception
1 compromised version
- May 23, 2025
Malware in com.unity.platforms
1 compromised version
- May 23, 2025
Malware in @nitro2/shared
1 compromised version
- May 23, 2025
Malware in com.unity.ml-agents
1 compromised version
- May 23, 2025
Malware in com.unity.rpc
1 compromised version
- May 23, 2025
Malware in com.unity.render-pipelines.universal-config
1 compromised version
- May 23, 2025
Malware in com.unity.multiplayer.tools
1 compromised version
- May 23, 2025
Malicious code in jquery.currencies (npm)
2 compromised versions
- May 23, 2025
Malicious code in com.unity.xr-line-renderer (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.renderstreaming (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.netcode.gameobjects (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.jobs (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.hlod (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.code-analysis (npm)
1 compromised version
- May 23, 2025
Malicious code in com.unity.build-report-inspector (npm)
1 compromised version
- May 23, 2025
Malicious code in agic-code-standards (npm)
1 compromised version
- May 23, 2025
Malicious code in @sl4x0/internal-package (npm)
- May 23, 2025
Malware in com.unity.build-report-inspector
1 compromised version
- May 23, 2025
Malware in com.unity.xr-line-renderer
1 compromised version
- May 23, 2025
Malware in com.unity.list-view-framework
1 compromised version
- May 23, 2025
Malware in com.unity.netcode.gameobjects
1 compromised version
- May 23, 2025
Malware in jquery.currencies
1 compromised version
- May 23, 2025
Malware in com.unity.formats.fbx
1 compromised version
- May 23, 2025
Malware in agic-code-standards
1 compromised version
- May 23, 2025
Malware in com.unity.scripting.python
1 compromised version
Page 6307 of 7,293