Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 4, 2025
Malicious code in dave-common (npm)
1 compromised version
- Apr 4, 2025
Malicious code in valid-ip-scope (npm)
- Apr 4, 2025
Malicious code in valid-ip-ban (npm)
1 compromised version
- Apr 4, 2025
Malware in valid-ip-scope
1 compromised version
- Apr 4, 2025
Malware in valid-ip-ban
1 compromised version
- Apr 4, 2025
Malicious code in @oldzeppelin/contract (npm)
1 compromised version
- Apr 4, 2025
Malicious code in ultrafasttelethon (PyPI)
4 compromised versions
- Apr 4, 2025
Malicious code in fastgram (PyPI)
1 compromised version
- Apr 4, 2025
Malicious code in fastertelethon (PyPI)
2 compromised versions
- Apr 4, 2025
Malicious code in scrt-www (npm)
1 compromised version
- Apr 4, 2025
Malicious code in @fraudprevention/device-intelligence (npm)
5 compromised versions
- Apr 3, 2025
Malicious code in r5-zknet-wallet (npm)
1 compromised version
- Apr 3, 2025
Malicious code in @harvest-finance/harvest-strategy-polygon (npm)
1 compromised version
- Apr 3, 2025
Malicious code in daos.fun (npm)
2 compromised versions
- Apr 3, 2025
Malicious code in telegram-client (npm)
9 compromised versions
- Apr 3, 2025
Malicious code in @pump.fun/core (npm)
- Apr 3, 2025
Malware in @pump.fun/core
1 compromised version
- Apr 3, 2025
Malware in telegram-client
1 compromised version
- Apr 3, 2025
Malicious code in nasa-oss (npm)
- Apr 3, 2025
Malware in compassrnsampleapp
1 compromised version
- Apr 3, 2025
Malware in nasa-oss
1 compromised version
- Apr 3, 2025
Malware in symphony-duplicates
1 compromised version
- Apr 3, 2025
Malicious code in prettier-prod (npm)
1 compromised version
- Apr 3, 2025
Malware in prettier-prod
1 compromised version
- Apr 3, 2025
Malicious code in colorinsa (PyPI)
1 compromised version
- Apr 3, 2025
Malicious code in whatwg-node-fetch-polyfill (npm)
- Apr 3, 2025
Malicious code in start-state-machine (npm)
- Apr 3, 2025
Malicious code in skills-validator (npm)
- Apr 3, 2025
Malicious code in monitor-inference-results (npm)
- Apr 3, 2025
Malicious code in aiprofilestyle (npm)
- Apr 3, 2025
Malicious code in adult-content-detection-aws (npm)
- Apr 3, 2025
Malware in whatwg-node-fetch-polyfill
1 compromised version
- Apr 3, 2025
Malware in adult-content-detection-aws
1 compromised version
- Apr 3, 2025
Malware in aiprofilestyle
1 compromised version
- Apr 3, 2025
Malware in skills-validator
1 compromised version
- Apr 3, 2025
Malware in monitor-inference-results
1 compromised version
- Apr 3, 2025
Malware in start-state-machine
1 compromised version
- Apr 3, 2025
Malicious code in jcl-core (npm)
1 compromised version
- Apr 3, 2025
Malicious code in fastly-ip-sync (npm)
- Apr 3, 2025
Malicious code in cdk-construct-library-v2 (npm)
- Apr 3, 2025
Malware in jcl-core
1 compromised version
- Apr 3, 2025
Malware in fastly-ip-sync
1 compromised version
- Apr 3, 2025
Malware in cdk-construct-library-v2
1 compromised version
- Apr 3, 2025
Malicious code in internallib_v284 (npm)
- Apr 3, 2025
Malware in internallib_v284
1 compromised version
- Apr 3, 2025
Malicious code in @bmw-fedev/auth (npm)
3 compromised versions
- Apr 3, 2025
Malware in @bmw-fedev/auth
1 compromised version
- Apr 3, 2025
Malicious code in trrx (npm)
- Apr 3, 2025
Malware in trrx
1 compromised version
- Apr 3, 2025
Malware in tag-soup-ng
1 compromised version
Page 6348 of 7,293