Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 9, 2025
Malicious code in wormhole-liquidity-layer-sdk (npm)
- Apr 9, 2025
Malware in wormhole-messenger-solana
1 compromised version
- Apr 9, 2025
Malware in wormhole-liquidity-layer-sdk
1 compromised version
- Apr 9, 2025
Malware in rlusd
1 compromised version
- Apr 9, 2025
Malware in typesense-sync
1 compromised version
- Apr 9, 2025
Malicious code in solana-candles-oracle-example (npm)
1 compromised version
- Apr 9, 2025
Malicious code in esy-m4 (npm)
1 compromised version
- Apr 9, 2025
Malicious code in bitcore-message-zen (npm)
2 compromised versions
- Apr 9, 2025
Malware in esy-m4
1 compromised version
- Apr 9, 2025
Malware in clarunit
1 compromised version
- Apr 9, 2025
Malware in bitcore-message-zen
1 compromised version
- Apr 9, 2025
Malware in solana-candles-oracle-example
1 compromised version
- Apr 9, 2025
Malicious code in zqdl333zqdl222 (npm)
1 compromised version
- Apr 9, 2025
Malware in zqdl333zqdl222
1 compromised version
- Apr 9, 2025
Malware in bagayaluzqdl159
1 compromised version
- Apr 9, 2025
Malware in zqdllqdz15975321
1 compromised version
- Apr 8, 2025
Malicious code in google-youtube (npm)
1 compromised version
- Apr 8, 2025
Malicious code in typesense-sync (npm)
1 compromised version
- Apr 8, 2025
Malicious code in native-bottom-sheet (npm)
1 compromised version
- Apr 8, 2025
Malicious code in eslint-config-mytonwallet (npm)
1 compromised version
- Apr 8, 2025
Malicious code in mtw-capacitor-usb-hid (npm)
1 compromised version
- Apr 8, 2025
Malicious code in redis_mktg (npm)
1 compromised version
- Apr 8, 2025
Malicious code in nucleus-form (npm)
2 compromised versions
- Apr 8, 2025
Withdrawn Advisory: Malware in @weave-mui/divider
1 compromised version
- Apr 8, 2025
Malware in nucleus-form
1 compromised version
- Apr 8, 2025
Malware in @hyattcorp/design-tokens
1 compromised version
- Apr 8, 2025
Malicious code in @n37scancp/highlight.js (npm)
4 compromised versions
- Apr 7, 2025
Malicious code in @hyattcorp/design-tokens (npm)
4 compromised versions
- Apr 7, 2025
Malicious code in modeldb-vis (npm)
1 compromised version
- Apr 7, 2025
Malicious code in xnil-server (npm)
- Apr 7, 2025
Malware in xnil-server
1 compromised version
- Apr 7, 2025
Malicious code in sasha-web3-utils (npm)
- Apr 7, 2025
Malicious code in sasha-bsc-utils (npm)
- Apr 7, 2025
Malware in sasha-web3-utils
1 compromised version
- Apr 7, 2025
Malware in sasha-bsc-utils
1 compromised version
- Apr 7, 2025
Malware in my-signature
1 compromised version
- Apr 7, 2025
Malicious code in moment-encryption (npm)
- Apr 7, 2025
Malware in moment-encryption
1 compromised version
- Apr 7, 2025
Malicious code in jito-encryption (npm)
- Apr 7, 2025
Malware in jito-encryption
1 compromised version
- Apr 7, 2025
Malicious code in file_downloader_sakib (npm)
31 compromised versions
- Apr 7, 2025
Malware in file_downloader_sakib
1 compromised version
- Apr 7, 2025
Malicious code in byted-midas (npm)
2 compromised versions
- Apr 7, 2025
Malware in byted-midas
1 compromised version
- Apr 7, 2025
Malware in byted-midas-render-plugin
1 compromised version
- Apr 7, 2025
Malicious code in zhilian-js-sdk (npm)
3 compromised versions
- Apr 7, 2025
Malicious code in boss-ui-ats (npm)
2 compromised versions
- Apr 7, 2025
Malicious code in boss-traceid (npm)
2 compromised versions
- Apr 7, 2025
Malware in boss-traceid
1 compromised version
- Apr 7, 2025
Malware in zhilian-js-sdk
1 compromised version
Page 6346 of 7,293