Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 30, 2025
Malicious code in bitcoinlibdbfix (PyPI)
7 compromised versions
- Mar 30, 2025
Malicious code in bitcoinlib-dev (PyPI)
6 compromised versions
- Mar 30, 2025
Malicious code in web-commerce-hook (npm)
1 compromised version
- Mar 30, 2025
Malicious code in nextmvc3primary (npm)
1 compromised version
- Mar 30, 2025
Malicious code in eqbank (npm)
2 compromised versions
- Mar 30, 2025
Malicious code in sony-liv-smarttv (npm)
1 compromised version
- Mar 30, 2025
Malicious code in regiepult (npm)
1 compromised version
- Mar 30, 2025
Malicious code in careform (npm)
1 compromised version
- Mar 30, 2025
Malicious code in rippling-marketing-site (npm)
2 compromised versions
- Mar 29, 2025
Malicious code in @nationalgeographicsociety/ngsui-header (npm)
2 compromised versions
- Mar 29, 2025
Malicious code in @nationalgeographicsociety/ngsui-footer (npm)
2 compromised versions
- Mar 29, 2025
Malicious code in castorama.pl (npm)
1 compromised version
- Mar 29, 2025
Malicious code in bugbounty208-test-package (npm)
1 compromised version
- Mar 28, 2025
Malicious code in agentbse (npm)
- Mar 28, 2025
Malware in agentbse
1 compromised version
- Mar 28, 2025
Malware in peritter
1 compromised version
- Mar 28, 2025
Malicious code in textgradient (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in sharpdefender (NuGet)
1 compromised version
- Mar 28, 2025
Malicious code in seedefender (NuGet)
3 compromised versions
- Mar 28, 2025
Malicious code in markdown-to-html (NuGet)
3 compromised versions
- Mar 28, 2025
Malicious code in evenote-thrift (RubyGems)
10 compromised versions
- Mar 28, 2025
Malicious code in ytest-cov (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in utilmy (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in twilio-rest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in torahbiblecodes (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in tempeh (PyPI)
4 compromised versions
- Mar 28, 2025
Malicious code in sphinxcontrib-napolean (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in solscan (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in slide-tc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ska-low-cbf-fpga (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in shleeh (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in requests-wiki (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in random-00013 (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyscf-fciqmc (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pyroforktgcrypto-pyrofork (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pydantic-kit (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pychaosvm (PyPI)
2 compromised versions
- Mar 28, 2025
Malicious code in piauthorizer (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pgmysql (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in pandaspytest (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in opera2d (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in omnigodz-random (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in multiopython (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in msgspec-python313-pre (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in license-txt (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in libmelee (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in lalpulsar (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in ignore-ssl (PyPI)
1 compromised version
- Mar 28, 2025
Malicious code in gmpykit (PyPI)
3 compromised versions
- Mar 28, 2025
Malicious code in flaskignoressl (PyPI)
1 compromised version
Page 6353 of 7,293