Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 22, 2025
Malicious code in lwc-recipes (npm)
1 compromised version
- Mar 21, 2025
Malicious code in tree-sitter-erlang (npm)
1 compromised version
- Mar 21, 2025
Malicious code in architecture-viewer (npm)
2 compromised versions
- Mar 21, 2025
Malware in @brix-crypto/crypto-js
1 compromised version
- Mar 21, 2025
Malicious code in prmduc193 (PyPI)
1 compromised version
- Mar 21, 2025
Malicious code in vulnerable-dependency (npm)
1 compromised version
- Mar 20, 2025
Malicious code in my-signature (npm)
2 compromised versions
- Mar 20, 2025
Malicious code in byted-midas-render-plugin (npm)
1 compromised version
- Mar 20, 2025
Malicious code in com.unity.performance.profile-analyzer (npm)
1 compromised version
- Mar 20, 2025
Malicious code in keypair-encryption (npm)
- Mar 20, 2025
Malware in keypair-encryption
1 compromised version
- Mar 20, 2025
Malicious code in chatbot-dashboard (npm)
1 compromised version
- Mar 20, 2025
Malicious code in n11-web-client (npm)
1 compromised version
- Mar 20, 2025
Malicious code in n11-chatbot (npm)
1 compromised version
- Mar 20, 2025
Malicious code in vscode-typescript-next (npm)
- Mar 20, 2025
Malicious code in typespec-java (npm)
- Mar 20, 2025
Malicious code in thiserror (npm)
- Mar 20, 2025
Malicious code in template-schema-validation-tools (npm)
- Mar 20, 2025
Malicious code in my-local-c (npm)
- Mar 20, 2025
Malicious code in my-local-b-off (npm)
- Mar 20, 2025
Malicious code in code-tours-github (npm)
3 compromised versions
- Mar 20, 2025
Malicious code in cargo_metadata (npm)
- Mar 20, 2025
Malicious code in cargo-cyclonedx (npm)
3 compromised versions
- Mar 20, 2025
Malicious code in azqr (npm)
- Mar 20, 2025
Malware in vscode-typescript-next
1 compromised version
- Mar 20, 2025
Malware in azqr
1 compromised version
- Mar 20, 2025
Malware in typespec-java
1 compromised version
- Mar 20, 2025
Malware in thiserror
1 compromised version
- Mar 20, 2025
Malware in template-schema-validation-tools
1 compromised version
- Mar 20, 2025
Malware in k8s-deploy-action
1 compromised version
- Mar 20, 2025
Malware in azure-rest-api-specs
1 compromised version
- Mar 20, 2025
Malware in assert_cmd
1 compromised version
- Mar 20, 2025
Malware in cargo_metadata
1 compromised version
- Mar 20, 2025
Malware in my-local-c
1 compromised version
- Mar 20, 2025
Malware in my-local-b-off
1 compromised version
- Mar 20, 2025
Malware in code-tours-github
1 compromised version
- Mar 20, 2025
Malware in cargo-cyclonedx
1 compromised version
- Mar 20, 2025
Malicious code in glide-core (npm)
1 compromised version
- Mar 20, 2025
Malware in foundry-js-react-blueprint
1 compromised version
- Mar 20, 2025
Malware in messaging-components
1 compromised version
- Mar 20, 2025
Malware in glide-core
1 compromised version
- Mar 20, 2025
Malicious code in tfjs-backend-wasm (npm)
- Mar 20, 2025
Malicious code in paypal-product-picker (npm)
106 compromised versions
- Mar 20, 2025
Malicious code in airbnb-i18n (npm)
- Mar 20, 2025
Malicious code in airbnb-dev (npm)
- Mar 20, 2025
Malware in airbnb-dev
1 compromised version
- Mar 20, 2025
Malware in airbnb-o2
1 compromised version
- Mar 20, 2025
Malware in paypal-product-picker
1 compromised version
- Mar 20, 2025
Malware in tfjs-backend-wasm
1 compromised version
- Mar 20, 2025
Malware in airbnb-i18n
1 compromised version
Page 6365 of 7,293