Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 15, 2025
Malware in nayan-imgur-upload-apis
1 compromised version
- May 15, 2025
Malware in nayan-apis-server
1 compromised version
- May 15, 2025
Malicious code in imran-photo360-apis (npm)
- May 15, 2025
Malicious code in imran-alldl (npm)
- May 15, 2025
Malicious code in abir-dl (npm)
- May 15, 2025
Malware in abir-dl
1 compromised version
- May 15, 2025
Malware in imran-photo360-apis
1 compromised version
- May 15, 2025
Malware in imran-alldl
1 compromised version
- May 15, 2025
Malicious code in imran-photo-api (npm)
- May 15, 2025
Malware in imran-photo-api
1 compromised version
- May 15, 2025
Malicious code in o1js-wrapper (npm)
- May 15, 2025
Malicious code in ethers-xdc (npm)
5 compromised versions
- May 15, 2025
Malware in pegin-cap-evaluator
1 compromised version
- May 15, 2025
Malware in ethers-xdc
1 compromised version
- May 15, 2025
Malware in o1js-wrapper
1 compromised version
- May 15, 2025
Malware in precompiled-iris300
1 compromised version
- May 15, 2025
Malware in tree-sitter-sqlite
1 compromised version
- May 15, 2025
Malware in rsk-transaction-helper
1 compromised version
- May 15, 2025
Malware in tree-sitter-dockerfile
1 compromised version
- May 15, 2025
Malware in bridge-transaction-parser-hop400
1 compromised version
- May 15, 2025
Malware in wdio-common
1 compromised version
- May 15, 2025
Malware in precompiled-wasabi100
1 compromised version
- May 15, 2025
Malware in x-tree-view
1 compromised version
- May 15, 2025
Malware in toptal-react-bikes
1 compromised version
- May 15, 2025
Malware in html-webpack-plugin-v4
1 compromised version
- May 15, 2025
Malware in shader-examples
1 compromised version
- May 15, 2025
Malware in com.siccity.gltfutility
1 compromised version
- May 15, 2025
Malware in bazelbuild.vscode-bazel
1 compromised version
- May 15, 2025
Malware in html-webpack-plugin-v5
1 compromised version
- May 15, 2025
Malware in llvm-vs-code-extensions.vscode-clangd
1 compromised version
- May 15, 2025
Malware in typespublishercontenthash
1 compromised version
- May 15, 2025
Malware in spicy-sections
1 compromised version
- May 15, 2025
Malware in conversation-extension-reservation
1 compromised version
- May 15, 2025
Malware in lezer-snowsql
1 compromised version
- May 15, 2025
Malware in @ringcx/agent-mfe-sdk
1 compromised version
- May 15, 2025
Malware in component-modernizr
1 compromised version
- May 15, 2025
Malicious code in developer-bridge (npm)
2 compromised versions
- May 15, 2025
Malicious code in qlkube-docs (npm)
1 compromised version
- May 14, 2025
Malicious code in f0-flow-resolver (npm)
6 compromised versions
- May 14, 2025
Malicious code in @tribal-worldwide-london/fa-loggerpoc (npm)
1 compromised version
- May 14, 2025
Malicious code in volkswagen-onehub-components-raj (npm)
1 compromised version
- May 14, 2025
Malicious code in keypair-encrypt (npm)
- May 14, 2025
Malware in keypair-encrypt
1 compromised version
- May 14, 2025
Malicious code in wix-pilot (npm)
1 compromised version
- May 14, 2025
Malicious code in webpack-cli-v4 (npm)
1 compromised version
- May 14, 2025
Malicious code in vite-logging-patcher (npm)
- May 14, 2025
Malicious code in test-vite-favicons-inject (npm)
- May 14, 2025
Malware in vite-logging-patcher
1 compromised version
- May 14, 2025
Malware in test-vite-favicons-inject
1 compromised version
- May 14, 2025
Malicious code in webpack-cli-4 (npm)
1 compromised version
Page 6324 of 7,293