Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 28, 2025
Malware in vault-action
1 compromised version
- Apr 28, 2025
Malware in cb-cookie-manager
1 compromised version
- Apr 28, 2025
Malware in gcp-alert-service
1 compromised version
- Apr 28, 2025
Malware in jcp-benchmarking
1 compromised version
- Apr 28, 2025
Malware in studocu-extension-pack
1 compromised version
- Apr 28, 2025
Malware in harman-experience
1 compromised version
- Apr 28, 2025
Malicious code in vonage-status-panel (npm)
3 compromised versions
- Apr 28, 2025
Malicious code in graphhopper-js-ui (npm)
1 compromised version
- Apr 28, 2025
Malware in graphhopper-js-ui
1 compromised version
- Apr 28, 2025
Malware in vonage-status-panel
1 compromised version
- Apr 28, 2025
Malicious code in uignite (npm)
- Apr 28, 2025
Malware in uignite
1 compromised version
- Apr 28, 2025
Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm)
4 compromised versions
- Apr 28, 2025
Malware in @zener-soft-consulting/ab-webcomponents-library
1 compromised version
- Apr 28, 2025
Malicious code in myexampledoges (npm)
- Apr 28, 2025
Malicious code in mydoges (npm)
- Apr 28, 2025
Malware in mydoges
1 compromised version
- Apr 28, 2025
Malware in myexampledoges
1 compromised version
- Apr 28, 2025
Malicious code in testdoges (npm)
- Apr 28, 2025
Malicious code in doges (npm)
2 compromised versions
- Apr 28, 2025
Malware in testdoges
1 compromised version
- Apr 28, 2025
Malware in doges
1 compromised version
- Apr 27, 2025
Malicious code in web3evm (PyPI)
4 compromised versions
- Apr 27, 2025
Malicious code in websign (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in web3yrpcs (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in web3wallet (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in web3automation (PyPI)
4 compromised versions
- Apr 27, 2025
Malicious code in web3author (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in walletweb3 (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in walletrpcs (PyPI)
2 compromised versions
- Apr 27, 2025
Malicious code in ora3 (PyPI)
1 compromised version
- Apr 27, 2025
Malicious code in alchemyrpcs (PyPI)
2 compromised versions
- Apr 26, 2025
Malicious code in climate-wallet (npm)
1 compromised version
- Apr 26, 2025
Malicious code in besec (npm)
1 compromised version
- Apr 26, 2025
Malicious code in amazon-chime-sdk-js-exp (npm)
5 compromised versions
- Apr 26, 2025
Malicious code in pretty-cli-logger (PyPI)
12 compromised versions
- Apr 26, 2025
Malicious code in my-rei-browser-shim (npm)
2 compromised versions
- Apr 25, 2025
Malicious code in freo-design-system (npm)
2 compromised versions
- Apr 25, 2025
Malicious code in qtpv (PyPI)
4 compromised versions
- Apr 25, 2025
Malicious code in pytzv (PyPI)
4 compromised versions
- Apr 25, 2025
Malicious code in neov (PyPI)
2 compromised versions
- MAL-2025-3395Malwarenpmdowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8Apr 25, 2025
Malicious code in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy (npm)
- MAL-2025-3392Malwarenpmdowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwtaApr 25, 2025
Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm)
- MAL-2025-3390Malwarenpmdowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0zApr 25, 2025
Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30 (npm)
- Apr 25, 2025
Malicious code in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8 (npm)
- MAL-2025-3387Malwarenpmdowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooeyApr 25, 2025
Malicious code in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey (npm)
- Apr 25, 2025
Malware in dowload_ebok_englens_spil_by_carlos_ruiz_zafon_iben_hasselbalch_lqvq8
1 compromised version
Page 6337 of 7,293