Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 25, 2025
Malware in blockzie-link
1 compromised version
- Mar 25, 2025
Malware in blockzie-vm
1 compromised version
- Mar 25, 2025
Malicious code in blockzie-save-svg-as-png (npm)
- Mar 25, 2025
Malicious code in blockzie-l10n (npm)
- Mar 25, 2025
Malicious code in blockzie-blocks (npm)
- Mar 25, 2025
Malware in blockzie-l10n
1 compromised version
- Mar 25, 2025
Malware in blockzie-blocks
1 compromised version
- Mar 25, 2025
Malware in blockzie-save-svg-as-png
1 compromised version
- Mar 24, 2025
Malicious code in pyrovider (PyPI)
6 compromised versions
- Mar 24, 2025
Malicious code in codex-cipher (npm)
2 compromised versions
- Mar 24, 2025
Malicious code in @wxplugin-types/wxf51d01cf670e28d3 (npm)
- Mar 24, 2025
Malware in @wxplugin-types/wxf51d01cf670e28d3
1 compromised version
- Mar 24, 2025
Malicious code in eclipse-tractusx-github-io (npm)
1 compromised version
- Mar 24, 2025
Malicious code in team-bsb-bot (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bsb-backup (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in my-account-end-game (npm)
- Mar 24, 2025
Malicious code in mind-meeting-assistant2 (npm)
- Mar 24, 2025
Malicious code in epic-react-store (npm)
- Mar 24, 2025
Malicious code in default-shared-store (npm)
- Mar 24, 2025
Malicious code in creativehub (npm)
- Mar 24, 2025
Malware in mind-meeting-assistant2
1 compromised version
- Mar 24, 2025
Malware in default-shared-store
1 compromised version
- Mar 24, 2025
Malware in my-account-end-game
1 compromised version
- Mar 24, 2025
Malware in creativehub
1 compromised version
- Mar 24, 2025
Malware in epic-react-store
1 compromised version
- Mar 24, 2025
Malware in icons-material
1 compromised version
- Mar 24, 2025
Malware in architecture-viewer
1 compromised version
- Mar 24, 2025
Malicious code in f2d5cfdc642c3d5 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in f2d5cfdc642c3d4 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI)
3 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)
2 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)
1 compromised version
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)
2 compromised versions
- Mar 24, 2025
Malicious code in bbllaacckkwwoollff (PyPI)
4 compromised versions
- Mar 24, 2025
Malicious code in solana-headless-sdk (npm)
- Mar 24, 2025
Malicious code in @mctursh/ui-builder (npm)
- Mar 24, 2025
Malicious code in @agateh/solana-headless-core (npm)
- Mar 24, 2025
Malicious code in @agateh/solana-headless-adapter-base (npm)
- Mar 24, 2025
Malware in @mctursh/ui-builder
1 compromised version
- Mar 24, 2025
Malware in @agateh/solana-headless-core
1 compromised version
- Mar 24, 2025
Malware in @agateh/solana-headless-adapter-base
1 compromised version
- Mar 24, 2025
Malware in solana-headless-sdk
1 compromised version
- Mar 24, 2025
Malicious code in brixcrypto (npm)
- Mar 24, 2025
Malware in brixcrypto
1 compromised version
- Mar 23, 2025
Malicious code in yolov8mini (PyPI)
10 compromised versions
- Mar 23, 2025
Malicious code in codeoptimizer (PyPI)
2 compromised versions
- Mar 23, 2025
Malicious code in ccfk (npm)
1 compromised version
- Mar 23, 2025
Malicious code in gh-find-current-pr (npm)
2 compromised versions
- Mar 23, 2025
Malicious code in tec-registry (npm)
1 compromised version
Page 6364 of 7,293