Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 15, 2025
Malware in ai_challenge
1 compromised version
- May 15, 2025
Malware in auth0-guardian-management-client
1 compromised version
- May 15, 2025
Malware in passport-thecity
1 compromised version
- May 15, 2025
Malware in opensource-marketplace
1 compromised version
- May 15, 2025
Malware in react-native-plugin-ms-adal
1 compromised version
- May 15, 2025
Malware in guardian-advanced-example
1 compromised version
- May 15, 2025
Malware in aads-blog
1 compromised version
- May 15, 2025
Malware in openidconnect.net
1 compromised version
- May 15, 2025
Malicious code in baby-electrona (npm)
- May 15, 2025
Malicious code in baby-electron (npm)
- May 15, 2025
Malware in baby-electron
1 compromised version
- May 15, 2025
Malware in baby-electrona
1 compromised version
- May 15, 2025
Malicious code in a0e50092.fcs.pw (npm)
1 compromised version
- May 15, 2025
Malicious code in @support-editor/mts-editor-dist (npm)
- May 15, 2025
Malicious code in @support-editor/a0e50092.fcs.pw (npm)
1 compromised version
- May 15, 2025
Malware in a0e50092.fcs.pw
1 compromised version
- May 15, 2025
Malware in @support-editor/a0e50092.fcs.pw
1 compromised version
- May 15, 2025
Malware in @support-editor/mts-editor-dist
1 compromised version
- May 15, 2025
Malicious code in @nx-frontend/bonx-microfrontends (npm)
1 compromised version
- May 15, 2025
Malicious code in @equis/core (npm)
1 compromised version
- May 15, 2025
Malware in @goldenfront/core
1 compromised version
- May 15, 2025
Malware in @nx-frontend/bonx-microfrontends
1 compromised version
- May 15, 2025
Malware in @equis/core
1 compromised version
- May 15, 2025
Malicious code in spl-tokens (npm)
8 compromised versions
- May 15, 2025
Malicious code in mocha-js (npm)
- May 15, 2025
Malicious code in debug-mocha (npm)
- May 15, 2025
Malware in mocha-js
1 compromised version
- May 15, 2025
Malware in spl-tokens
1 compromised version
- May 15, 2025
Malware in debug-mocha
1 compromised version
- May 15, 2025
Malicious code in solanaspl-tokens (npm)
- May 15, 2025
Malware in solanaspl-tokens
1 compromised version
- May 15, 2025
Malware in @dz-lib/dz-cli
1 compromised version
- May 15, 2025
Malware in @bh-ui/theme
1 compromised version
- May 15, 2025
Malware in @hisdk/mail-mac
1 compromised version
- May 15, 2025
Malware in @dz-lib/icon
1 compromised version
- May 15, 2025
Malware in lightbeam-we
1 compromised version
- May 15, 2025
Malware in media_kit_native_event_loop
1 compromised version
- May 15, 2025
Malware in flashcards-sdk-converter
1 compromised version
- May 15, 2025
Malware in tracking-protection-experiment
1 compromised version
- May 15, 2025
Malware in yoga-repo
1 compromised version
- May 15, 2025
Malware in flight_lab_control
1 compromised version
- May 15, 2025
Malware in google.kythe
1 compromised version
- May 15, 2025
Malicious code in shaon-media-downloader (npm)
- May 15, 2025
Malicious code in fca-shaon-project (npm)
- May 15, 2025
Malware in shaon-media-downloader
1 compromised version
- May 15, 2025
Malware in fca-shaon-project
1 compromised version
- May 15, 2025
Malicious code in nayan-videos-downloader (npm)
7 compromised versions
- May 15, 2025
Malware in nayan-videos-downloader
1 compromised version
- May 15, 2025
Malicious code in nayan-imgur-upload-apis (npm)
- May 15, 2025
Malicious code in nayan-apis-server (npm)
Page 6323 of 7,293