Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 22, 2025
Malicious code in @workleap-tracking/logrocket (npm)
2 compromised versions
- May 22, 2025
Malicious code in @webhighlights/shared-components (npm)
1 compromised version
- May 22, 2025
Malicious code in @rf-ui-platform/react-ui-components (npm)
2 compromised versions
- May 22, 2025
Malicious code in @rf-auth/rf-auth-react (npm)
2 compromised versions
- May 22, 2025
Malicious code in @phoenix-common/angular-frontend-library (npm)
1 compromised version
- May 22, 2025
Malicious code in @motortrend/sonic-api (npm)
1 compromised version
- May 22, 2025
Malicious code in @inner-source/ciam-sdk (npm)
2 compromised versions
- May 22, 2025
Malicious code in @ids-beta/tooltip (npm)
1 compromised version
- May 22, 2025
Malicious code in @flapp/inventory-management (npm)
1 compromised version
- May 22, 2025
Malicious code in @enzyme-health/common-models (npm)
2 compromised versions
- May 22, 2025
Malicious code in @dailyapy-rn/rn-push-provisioning (npm)
1 compromised version
- May 22, 2025
Malicious code in @ctg-ui/web-shell-express (npm)
2 compromised versions
- May 22, 2025
Malicious code in @confluent-cfet-medusa/dataset-designer (npm)
2 compromised versions
- May 22, 2025
Malicious code in @character-tech/common (npm)
2 compromised versions
- May 22, 2025
Malicious code in @character-tech/client-common (npm)
2 compromised versions
- May 22, 2025
Malicious code in @bmwfedev/playwright-helpers (npm)
1 compromised version
- May 22, 2025
Malicious code in ypj (PyPI)
1 compromised version
- May 22, 2025
Malicious code in web3-validators (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in web3-requests (PyPI)
1 compromised version
- May 22, 2025
Malicious code in web3-request-1-8-54 (PyPI)
1 compromised version
- May 22, 2025
Malicious code in web3-request (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in web3-checksums (PyPI)
1 compromised version
- May 22, 2025
Malicious code in web3-checksumm (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in web3-checksum (PyPI)
1 compromised version
- May 22, 2025
Malicious code in web3-auto (PyPI)
1 compromised version
- May 22, 2025
Malicious code in wallet-rpc (PyPI)
1 compromised version
- May 22, 2025
Malicious code in verifysteream (PyPI)
3 compromised versions
- May 22, 2025
Malicious code in tronclient (PyPI)
1 compromised version
- May 22, 2025
Malicious code in solanautil (PyPI)
1 compromised version
- May 22, 2025
Malicious code in pythonbitcoinlib (PyPI)
1 compromised version
- May 22, 2025
Malicious code in pythonbinance (PyPI)
1 compromised version
- May 22, 2025
Malicious code in python-coinbase (PyPI)
1 compromised version
- May 22, 2025
Malicious code in pystile (PyPI)
5 compromised versions
- May 22, 2025
Malicious code in py-solanautil (PyPI)
5 compromised versions
- May 22, 2025
Malicious code in puttytitle (PyPI)
1 compromised version
- May 22, 2025
Malicious code in keybard (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in evillib-cli-demo (PyPI)
1 compromised version
- May 22, 2025
Malicious code in el1t3 (PyPI)
10 compromised versions
- May 22, 2025
Malicious code in easyascii (PyPI)
17 compromised versions
- May 22, 2025
Malicious code in colorate (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in ckr (PyPI)
2 compromised versions
- May 22, 2025
Malicious code in chain-validator (PyPI)
1 compromised version
- May 22, 2025
Malicious code in vite-tsconsole-log (npm)
- May 22, 2025
Malicious code in staking-config (npm)
- May 22, 2025
Malware in vite-tsconsole-log
1 compromised version
- May 22, 2025
Malware in staking-config
1 compromised version
- May 22, 2025
Malicious code in node-smtp-mailer (npm)
- May 22, 2025
Malware in node-smtp-mailer
1 compromised version
- May 22, 2025
Malicious code in node-facebook-messenger-api (npm)
- May 22, 2025
Malware in node-facebook-messenger-api
1 compromised version
Page 6309 of 7,293