Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- May 7, 2025
Malware in create-krnl-app
1 compromised version
- May 7, 2025
Malware in krnl-cli
1 compromised version
- May 7, 2025
Malicious code in outline-shadowsocksconfig (npm)
1 compromised version
- May 7, 2025
Malicious code in bitpay-push-notification-client (npm)
2 compromised versions
- May 7, 2025
Malware in outline-shadowsocksconfig
1 compromised version
- May 7, 2025
Malware in bitpay-push-notification-client
1 compromised version
- May 7, 2025
Malicious code in graphalgo (npm)
7 compromised versions
- May 7, 2025
Malicious code in express-cronjs (npm)
2 compromised versions
- May 7, 2025
Malware in express-cronjs
1 compromised version
- May 7, 2025
Malware in graphalgo
1 compromised version
- May 7, 2025
Malware in rose-bn
1 compromised version
- May 7, 2025
Malicious code in toast-sliders (npm)
1 compromised version
- May 7, 2025
Malware in toast-sliders
1 compromised version
- May 7, 2025
Malicious code in orvyn (npm)
- May 7, 2025
Malware in orvyn
1 compromised version
- May 7, 2025
Malicious code in glance-design (npm)
- May 7, 2025
Malware in glance-design
1 compromised version
- May 7, 2025
Malicious code in flueneceenergy (npm)
1 compromised version
- May 7, 2025
Malicious code in fluenceenergy (npm)
1 compromised version
- May 7, 2025
Malware in flueneceenergy
1 compromised version
- May 7, 2025
Malware in fluenceenergy
1 compromised version
- May 7, 2025
Malware in feather-provider-filter
1 compromised version
- May 7, 2025
Malicious code in pixel-percent (npm)
- May 7, 2025
Malware in pixel-percent
1 compromised version
- May 7, 2025
Malicious code in framer-motion-ext (npm)
- May 7, 2025
Malware in framer-motion-ext
1 compromised version
- May 7, 2025
Malicious code in crypto-provider (npm)
1 compromised version
- May 6, 2025
Malicious code in @acesso-io/genoma-ui (npm)
1 compromised version
- May 6, 2025
Malicious code in veriftest1asdlaaaa (PyPI)
1 compromised version
- May 6, 2025
Malicious code in veriftest1asdlaaa (PyPI)
1 compromised version
- May 6, 2025
Malicious code in veriftest1asdlaa (PyPI)
1 compromised version
- May 6, 2025
Malicious code in veriftest1asdla (PyPI)
1 compromised version
- May 6, 2025
Malicious code in veriftest1asdl (PyPI)
1 compromised version
- May 6, 2025
Malicious code in testveriftest1asdlaaaaa (PyPI)
1 compromised version
- May 6, 2025
Malicious code in testveriftest1asdlaaaa (PyPI)
1 compromised version
- May 6, 2025
Malicious code in toloka-tb (npm)
1 compromised version
- May 6, 2025
Malware in toloka-tb
1 compromised version
- May 6, 2025
Malware in @adsk-forks/jsonpath
1 compromised version
- May 6, 2025
Malicious code in internallib_v803 (npm)
1 compromised version
- May 6, 2025
Malware in internallib_v803
1 compromised version
- May 6, 2025
Malicious code in internallib_v921 (npm)
3 compromised versions
- May 6, 2025
Malware in internallib_v921
1 compromised version
- May 6, 2025
Malware in adobe-commerce-magento
1 compromised version
- May 6, 2025
Malware in arena-plm
1 compromised version
- May 6, 2025
Malware in adobe-acrobat-sign
1 compromised version
- May 6, 2025
Malware in aspose
1 compromised version
- May 6, 2025
Malware in adobe-io-events
1 compromised version
- May 6, 2025
Malware in amazon-seller-central
1 compromised version
- May 6, 2025
Malware in adp-workforce-now
1 compromised version
- May 6, 2025
Malicious code in compiletest_rs (npm)
1 compromised version
Page 6329 of 7,293