Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 28, 2025
Malware in postp2ptxnserv
1 compromised version
- Mar 28, 2025
Malware in shipmentdetails-paypal
1 compromised version
- Mar 28, 2025
Malware in mocha-dast-reporter
1 compromised version
- Mar 28, 2025
Malware in pplinkpath
1 compromised version
- Mar 28, 2025
Malware in riskchallengeserv-paypal
1 compromised version
- Mar 28, 2025
Malware in ppcardmanagementv2serv
1 compromised version
- Mar 28, 2025
Malware in shipmenttrackingserv-paypal
1 compromised version
- Mar 28, 2025
Malware in identitydocumentserv-multipart-paypal
1 compromised version
- Mar 28, 2025
Malware in invoicetax-paypal
1 compromised version
- Mar 28, 2025
Malicious code in mafid-prod-fe (npm)
1 compromised version
- Mar 28, 2025
Malware in mafid-prod-fe
1 compromised version
- Mar 28, 2025
Malicious code in mc5-adidas (npm)
1 compromised version
- Mar 28, 2025
Malware in mc5-adidas
1 compromised version
- Mar 28, 2025
Malware in eclipse-tractusx-github-io
1 compromised version
- Mar 28, 2025
Malicious code in icloud-cod (npm)
- Mar 28, 2025
Malware in icloud-cod
1 compromised version
- Mar 28, 2025
Malicious code in resolver-options (npm)
- Mar 28, 2025
Malicious code in gg-module (npm)
- Mar 28, 2025
Malicious code in gg-key-listener (npm)
- Mar 28, 2025
Malware in gg-module
1 compromised version
- Mar 28, 2025
Malware in resolver-options
1 compromised version
- Mar 28, 2025
Malware in gg-key-listener
1 compromised version
- Mar 28, 2025
Malicious code in toc-generator-markdown (npm)
- Mar 28, 2025
Malicious code in file-auto-cleaner (npm)
- Mar 28, 2025
Malware in file-auto-cleaner
1 compromised version
- Mar 28, 2025
Malware in toc-generator-markdown
1 compromised version
- Mar 28, 2025
Malicious code in dir-auto-backup (npm)
- Mar 28, 2025
Malware in dir-auto-backup
1 compromised version
- Mar 28, 2025
Malicious code in loka12 (npm)
- Mar 28, 2025
Malicious code in f0-state-holder-duke (npm)
- Mar 28, 2025
Malware in loka12
1 compromised version
- Mar 28, 2025
Malware in f0-state-holder-duke
1 compromised version
- Mar 28, 2025
Malicious code in keradsdsdsdsddsdaaqw (npm)
- Mar 28, 2025
Malicious code in f0-data-collection-service-mock (npm)
1 compromised version
- Mar 28, 2025
Malware in keradsdsdsdsddsdaaqw
1 compromised version
- Mar 28, 2025
Malware in f0-data-collection-service-mock
1 compromised version
- Mar 28, 2025
Malicious code in login-paypal (npm)
13 compromised versions
- Mar 28, 2025
Malware in login-paypal
1 compromised version
- Mar 28, 2025
Malicious code in timezone-tool (npm)
- Mar 28, 2025
Malicious code in smart-file-renamer (npm)
- Mar 28, 2025
Malware in smart-file-renamer
1 compromised version
- Mar 28, 2025
Malware in timezone-tool
1 compromised version
- Mar 28, 2025
Malicious code in dir-tree-generator (npm)
- Mar 28, 2025
Malware in dir-tree-generator
1 compromised version
- Mar 28, 2025
Malicious code in teleport-ui (npm)
4 compromised versions
- Mar 28, 2025
Malicious code in ecko-wallet-react (npm)
- Mar 28, 2025
Malicious code in ecko-wallet (npm)
- Mar 28, 2025
Malicious code in degate_protocols (npm)
- Mar 28, 2025
Malicious code in degate.js (npm)
- Mar 28, 2025
Malicious code in degate (npm)
Page 6357 of 7,293