Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 29, 2025
Malware in jsonpacks
1 compromised version
- Apr 29, 2025
Malicious code in webview-common (npm)
- Apr 29, 2025
Malware in webview-common
1 compromised version
- Apr 29, 2025
Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg (npm)
1 compromised version
- Apr 29, 2025
Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-client-gadfjgfsf (npm)
4 compromised versions
- Apr 29, 2025
Malicious code in @reserach_org_jfhalsdhfkslsfds/metadata-collector (npm)
3 compromised versions
- Apr 29, 2025
Malware in @reserach_org_jfhalsdhfkslsfds/openai-server-skfghdg
1 compromised version
- Apr 29, 2025
Malware in @reserach_org_jfhalsdhfkslsfds/metadata-collector
1 compromised version
- Apr 29, 2025
Malware in @reserach_org_jfhalsdhfkslsfds/openai-client-gadfjgfsf
1 compromised version
- Apr 29, 2025
Malicious code in metadata-collector (npm)
- Apr 29, 2025
Malware in metadata-collector
1 compromised version
- Apr 28, 2025
Malicious code in husky-ts (npm)
23 compromised versions
- Apr 28, 2025
Malware in husky-ts
1 compromised version
- Apr 28, 2025
Malicious code in eslint-js (npm)
35 compromised versions
- Apr 28, 2025
Malware in eslint-js
1 compromised version
- Apr 28, 2025
Malicious code in wallettron (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronlid (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronlibapi (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronjoi (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronapipy (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronapinet (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in wallettronpy (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in trongridlib (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in trxtwo (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in trxone (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronlix (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronlibpy (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronlib (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in tronix (PyPI)
1 compromised version
- Apr 28, 2025
Malicious code in node-hashing (npm)
- Apr 28, 2025
Malware in node-hashing
1 compromised version
- Apr 28, 2025
Malicious code in auth-help3r (npm)
- Apr 28, 2025
Malware in auth-help3r
1 compromised version
- Apr 28, 2025
Malicious code in turbo-bike-inspector (npm)
- Apr 28, 2025
Malware in turbo-bike-inspector
1 compromised version
- Apr 28, 2025
Malicious code in fc-online (npm)
- Apr 28, 2025
Malware in fc-online
1 compromised version
- Apr 28, 2025
Malicious code in jd-npm-com-test (npm)
1 compromised version
- Apr 28, 2025
Malware in jd-npm-com-test
1 compromised version
- Apr 28, 2025
Malicious code in needlecast_mvd_ads_site_client (npm)
- Apr 28, 2025
Malicious code in needlecast_b9s_jewel_fyc_fe_client (npm)
- Apr 28, 2025
Malware in needlecast_mvd_ads_site_client
1 compromised version
- Apr 28, 2025
Malware in needlecast_b9s_jewel_fyc_fe_client
1 compromised version
- Apr 28, 2025
Malicious code in jcp-benchmarking (npm)
1 compromised version
- Apr 28, 2025
Malicious code in harman-experience (npm)
1 compromised version
- Apr 28, 2025
Malicious code in green-giant (npm)
1 compromised version
- Apr 28, 2025
Malicious code in gcp-alert-service (npm)
1 compromised version
- Apr 28, 2025
Malicious code in cerberus-management-dashboard (npm)
1 compromised version
- Apr 28, 2025
Malware in green-giant
1 compromised version
- Apr 28, 2025
Malware in cerberus-management-dashboard
1 compromised version
Page 6336 of 7,293