Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 28, 2025
Malware in degate
1 compromised version
- Mar 28, 2025
Malware in ecko-wallet-react
1 compromised version
- Mar 28, 2025
Malware in ecko-wallet
1 compromised version
- Mar 28, 2025
Malware in degate_protocols
1 compromised version
- Mar 28, 2025
Malware in teleport-ui
1 compromised version
- Mar 28, 2025
Malware in degate.js
1 compromised version
- Mar 28, 2025
Malware in cryptomus-aurora-kit
1 compromised version
- Mar 28, 2025
Malicious code in kaddex-ui (npm)
2 compromised versions
- Mar 28, 2025
Malicious code in ecko-dex-react (npm)
- Mar 28, 2025
Malware in ecko-dex-react
1 compromised version
- Mar 28, 2025
Malware in kaddex-ui
1 compromised version
- Mar 28, 2025
Malicious code in events-utils-lib (npm)
1 compromised version
- Mar 28, 2025
Malicious code in chai-validator (npm)
1 compromised version
- Mar 28, 2025
Malware in events-utils-lib
1 compromised version
- Mar 28, 2025
Malware in chai-validator
1 compromised version
- Mar 28, 2025
Malicious code in @takamol/react-qiwa-core (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-remote-visuals (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-library (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-env-utils (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-design-system (npm)
- Mar 28, 2025
Malicious code in @takamol/qiwa-api-client (npm)
- Mar 28, 2025
Malicious code in @takamol/ets-react-components (npm)
- Mar 28, 2025
Malware in @takamol/qiwa-remote-visuals
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-library
1 compromised version
- Mar 28, 2025
Malware in @takamol/react-qiwa-core
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-design-system
1 compromised version
- Mar 28, 2025
Malware in @takamol/ets-react-components
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-api-client
1 compromised version
- Mar 28, 2025
Malware in @takamol/qiwa-env-utils
1 compromised version
- Mar 28, 2025
Malicious code in @takamol/eslint-config (npm)
- Mar 28, 2025
Malware in @takamol/eslint-config
1 compromised version
- Mar 28, 2025
Malicious code in oasis-os-theming (npm)
1 compromised version
- Mar 28, 2025
Malware in dmpconnectjsapp-base
1 compromised version
- Mar 28, 2025
Malware in oasis-os-theming
1 compromised version
- Mar 28, 2025
Malware in oasis-os-common
1 compromised version
- Mar 28, 2025
Malware in notification-center-admin
1 compromised version
- Mar 28, 2025
Malicious code in osxlocation (npm)
- Mar 28, 2025
Malicious code in macos-relese (npm)
6 compromised versions
- Mar 28, 2025
Malicious code in macappstore (npm)
2 compromised versions
- Mar 28, 2025
Malware in macappstore
1 compromised version
- Mar 28, 2025
Malware in osxlocation
1 compromised version
- Mar 28, 2025
Malware in macos-relese
1 compromised version
- Mar 28, 2025
Malicious code in mathiconjsnz (npm)
4 compromised versions
- Mar 28, 2025
Malware in mathiconjsnz
1 compromised version
- Mar 28, 2025
Malicious code in @mukesh-d11/testing (npm)
- Mar 28, 2025
Malware in @mukesh-d11/testing
1 compromised version
- Mar 27, 2025
Malicious code in conn-utils (PyPI)
2 compromised versions
- Mar 27, 2025
Malicious code in dmpconnectjsapp-base (npm)
1 compromised version
- Mar 27, 2025
Malicious code in @johndeere-tech/helios-mat-styles (npm)
1 compromised version
- Mar 27, 2025
Malicious code in @johndeere-tech/helios-styles (npm)
1 compromised version
Page 6358 of 7,293