Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Apr 3, 2025
Malicious code in hide-console-api (npm)
- Apr 3, 2025
Malware in hide-console-api
1 compromised version
- Apr 3, 2025
Malware in windowsreveal
1 compromised version
- Apr 3, 2025
Malicious code in nva-process-inf (npm)
- Apr 3, 2025
Malicious code in nva-pc-inf (npm)
- Apr 3, 2025
Malicious code in nva-direct-showof (npm)
- Apr 3, 2025
Malware in nva-direct-showof
1 compromised version
- Apr 3, 2025
Malware in nva-process-inf
1 compromised version
- Apr 3, 2025
Malware in nva-pc-inf
1 compromised version
- Apr 2, 2025
Malicious code in flask-auth-system (PyPI)
2 compromised versions
- Apr 2, 2025
Malicious code in flask-auth-sys (PyPI)
1 compromised version
- Apr 2, 2025
Malicious code in one-venafi-local-store-manager (npm)
3 compromised versions
- Apr 2, 2025
Malicious code in @hongfangze/three-api (npm)
- Apr 2, 2025
Malicious code in @hongfangze/pack (npm)
- Apr 2, 2025
Malicious code in @hongfangze/mq (npm)
- Apr 2, 2025
Malicious code in @hongfangze/http-request (npm)
- Apr 2, 2025
Malicious code in @hongfangze/derive (npm)
- Apr 2, 2025
Malware in @hongfangze/three-api
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/pack
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/derive
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/mq
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/http-request
1 compromised version
- Apr 2, 2025
Malicious code in @hongfangze/verify (npm)
- Apr 2, 2025
Malicious code in @hongfangze/string (npm)
- Apr 2, 2025
Malicious code in @hongfangze/simple-resource-server (npm)
- Apr 2, 2025
Malicious code in @hongfangze/random (npm)
- Apr 2, 2025
Malicious code in @hongfangze/progress (npm)
- Apr 2, 2025
Malicious code in @hongfangze/proc (npm)
- Apr 2, 2025
Malicious code in @hongfangze/office (npm)
- Apr 2, 2025
Malicious code in @hongfangze/obtain (npm)
- Apr 2, 2025
Malicious code in @hongfangze/network (npm)
- Apr 2, 2025
Malicious code in @hongfangze/guid (npm)
- Apr 2, 2025
Malicious code in @hongfangze/filestream (npm)
- Apr 2, 2025
Malicious code in @hongfangze/email (npm)
- Apr 2, 2025
Malicious code in @hongfangze/date (npm)
- Apr 2, 2025
Malicious code in @hongfangze/database (npm)
- Apr 2, 2025
Malicious code in @hongfangze/cryptography (npm)
- Apr 2, 2025
Malicious code in @hongfangze/convert (npm)
- Apr 2, 2025
Malicious code in @hongfangze/concurrent (npm)
- Apr 2, 2025
Malicious code in @hongfangze/computer (npm)
- Apr 2, 2025
Malicious code in @hongfangze/calc (npm)
- Apr 2, 2025
Malicious code in @hongfangze/array (npm)
- Apr 2, 2025
Malware in @hongfangze/proc
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/random
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/progress
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/filestream
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/database
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/verify
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/cryptography
1 compromised version
- Apr 2, 2025
Malware in @hongfangze/convert
1 compromised version
Page 6350 of 7,293