Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 25, 2025
Malware in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7
1 compromised version
- GHSA-724r-2r78-f6g9Malwarenpmdowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8Apr 25, 2025
Malware in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8
1 compromised version
- GHSA-5xpv-h6xh-p7hfMalwarenpmdowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyyApr 25, 2025
Malware in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy
1 compromised version
- GHSA-59hh-rhj8-vh66Malwarenpmdowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooeyApr 25, 2025
Malware in dowload_ebok_a_bela_e_a_fera_by_elizabeth_rudnick_evan_spiliotopoulos_stephen_ch_9ooey
1 compromised version
- Apr 25, 2025
Malware in dowload_ebok_he_is_a_beast_t04_by_saki_aikawa_9bj30
1 compromised version
- GHSA-4r67-q2v9-68wrMalwarenpmdowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0zApr 25, 2025
Malware in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z
1 compromised version
- GHSA-2vp3-9rpr-vgh6Malwarenpmdowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwtaApr 25, 2025
Malware in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta
1 compromised version
- MAL-2025-3391Malwarenpmdowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sjApr 25, 2025
Malicious code in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj (npm)
- GHSA-657w-hrrp-r342Malwarenpmdowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sjApr 25, 2025
Malware in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj
1 compromised version
- Apr 25, 2025
Malicious code in tensorflowlitex (PyPI)
1 compromised version
- Apr 24, 2025
Malicious code in bytedmemfdd345 (PyPI)
1 compromised version
- Apr 24, 2025
Malicious code in byted-torch-monitor (PyPI)
2 compromised versions
- Apr 24, 2025
Malicious code in ark-vmp-reverse (PyPI)
1 compromised version
- Apr 24, 2025
Malicious code in digital-retail-falabella-unified-login (npm)
1 compromised version
- Apr 24, 2025
Malicious code in discord-vc-manager (npm)
1 compromised version
- Apr 24, 2025
Malicious code in echo-color (npm)
1 compromised version
- Apr 24, 2025
Malicious code in keypair-encryptor (npm)
- Apr 24, 2025
Malware in keypair-encryptor
1 compromised version
- Apr 24, 2025
Malicious code in poc-sim (npm)
2 compromised versions
- Apr 24, 2025
Malicious code in poc-npm-hooks (npm)
1 compromised version
- Apr 24, 2025
Malicious code in @template-builder/iframe-api (npm)
1 compromised version
- Apr 24, 2025
Malicious code in rose-bn (npm)
1 compromised version
- Apr 24, 2025
Malicious code in bvr-api (RubyGems)
1 compromised version
- Apr 23, 2025
Malicious code in test-kaks3c (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in web3rpcs (PyPI)
2 compromised versions
- Apr 23, 2025
Malicious code in web3rpc (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in web3connectpy (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in web3-validator (PyPI)
3 compromised versions
- Apr 23, 2025
Malicious code in tronperm (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in tronlinkperm (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in tronclipy (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in timekeeper-verif1er (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in sxz (PyPI)
3 compromised versions
- Apr 23, 2025
Malicious code in sincpro-logger (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pyhack (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pycolarized (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in pyapimove (PyPI)
2 compromised versions
- Apr 23, 2025
Malicious code in pnuske (PyPI)
14 compromised versions
- Apr 23, 2025
Malicious code in leveup (PyPI)
2 compromised versions
- Apr 23, 2025
Malicious code in evm-validator (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in blackspammerbd-vx1 (PyPI)
1 compromised version
- Apr 23, 2025
Malicious code in zocslib (npm)
1 compromised version
- Apr 23, 2025
Malicious code in wertawana (npm)
1 compromised version
- Apr 23, 2025
Malicious code in vue-sectest (npm)
1 compromised version
- Apr 23, 2025
Malicious code in va-report-components (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in user-journey-tracker (npm)
17 compromised versions
- Apr 23, 2025
Malicious code in twitterapis (npm)
2 compromised versions
- Apr 23, 2025
Malicious code in tree-sitter-your-language (npm)
5 compromised versions
- Apr 23, 2025
Malicious code in testing433 (npm)
1 compromised version
- Apr 23, 2025
Malicious code in test5849912 (npm)
1 compromised version
Page 6338 of 7,293