Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 12, 2025
Malware in wwemix-contract
1 compromised version
- May 12, 2025
Malware in defisaver-v3-contracts
1 compromised version
- May 12, 2025
Malicious code in ghosts3c (npm)
- May 12, 2025
Malware in ghosts3c
1 compromised version
- May 12, 2025
Malware in scrt-www
1 compromised version
- May 12, 2025
Malware in pocketnet
1 compromised version
- May 12, 2025
Malware in rei-session
1 compromised version
- May 12, 2025
Malware in braze-i18n-knockout
1 compromised version
- May 12, 2025
Malware in my-rei-browser-shim
1 compromised version
- May 12, 2025
Malware in rei-breakpoint-detector
1 compromised version
- May 12, 2025
Malware in font-impact
1 compromised version
- May 12, 2025
Malicious code in conversation-extension-reservation (npm)
1 compromised version
- May 11, 2025
Malicious code in client-aem-content-engine (npm)
1 compromised version
- May 11, 2025
Malicious code in atlaskit-registry (npm)
4 compromised versions
- May 11, 2025
Malicious code in free-internet-dns (PyPI)
1 compromised version
- May 11, 2025
Malicious code in gear-idea-indexer-db (npm)
1 compromised version
- May 11, 2025
Malicious code in com.unity.visualeffectgraph (npm)
1 compromised version
- May 11, 2025
Malicious code in com.unity.render-pipelines.universal-config (npm)
1 compromised version
- May 11, 2025
Malicious code in com.unity.rendering.light-transport (npm)
1 compromised version
- May 11, 2025
Malicious code in gear-idea-common (npm)
1 compromised version
- May 11, 2025
Malicious code in @nitro2/shared (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.formats.fbx (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.robotics.warehouse.base (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.furioos-connection-kit (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.perception (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.rpc (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.cluster-display (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.platforms (npm)
1 compromised version
- May 10, 2025
Malicious code in solhint-plugin-chainlink-solidity (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.scripting.python (npm)
1 compromised version
- May 10, 2025
Malicious code in com.unity.list-view-framework (npm)
1 compromised version
- May 10, 2025
Malicious code in solana-test-suite (PyPI)
1 compromised version
- May 10, 2025
Malicious code in glean-indexing-api-client (PyPI)
1 compromised version
- May 10, 2025
Malicious code in python3-shodan (PyPI)
1 compromised version
- May 10, 2025
Malicious code in badgerdoc-storage (PyPI)
1 compromised version
- May 10, 2025
Malicious code in dial-xl (PyPI)
1 compromised version
- May 10, 2025
Malicious code in program-admin (PyPI)
2 compromised versions
- May 10, 2025
Malicious code in iconnect (PyPI)
1 compromised version
- May 10, 2025
Malicious code in document-inference (PyPI)
3 compromised versions
- May 10, 2025
Malicious code in braze-i18n-knockout (npm)
1 compromised version
- May 9, 2025
Malicious code in initer (PyPI)
4 compromised versions
- May 9, 2025
Malicious code in pyinitialyze (PyPI)
4 compromised versions
- May 9, 2025
Malicious code in pyiniter (PyPI)
1 compromised version
- May 9, 2025
Malicious code in pyinite (PyPI)
6 compromised versions
- May 9, 2025
Malicious code in fwm-poc-built-sites (npm)
2 compromised versions
- May 9, 2025
Malicious code in ace-tools (npm)
2 compromised versions
- May 9, 2025
Malicious code in braze-cordova-sdk (npm)
1 compromised version
- May 9, 2025
Malicious code in matlab-cli (PyPI)
12 compromised versions
- May 9, 2025
Malicious code in @phone_base_ui/base_call (npm)
1 compromised version
- May 8, 2025
Malicious code in opensource.ripple.com (npm)
1 compromised version
Page 6327 of 7,293