Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 19, 2025
Malware in devpod
1 compromised version
- Mar 19, 2025
Malware in ionicaiosampleapp
1 compromised version
- Mar 19, 2025
Malware in antlir2-docs
1 compromised version
- Mar 19, 2025
Malicious code in nnc-editor (npm)
1 compromised version
- Mar 19, 2025
Malicious code in exampleeeeeeeeeeeeeeeeeeee (npm)
- Mar 19, 2025
Malware in exampleeeeeeeeeeeeeeeeeeee
1 compromised version
- Mar 19, 2025
Malware in nnc-editor
1 compromised version
- Mar 19, 2025
Malware in starrocks
1 compromised version
- Mar 19, 2025
Malware in timesketch
1 compromised version
- Mar 19, 2025
Malware in whatsapp-sdk-docs
1 compromised version
- Mar 19, 2025
Malware in atlas-user-monitor
1 compromised version
- Mar 19, 2025
Malware in atlas-websocket
1 compromised version
- Mar 19, 2025
Malware in @contraktor-tech/poc_confusion
1 compromised version
- Mar 18, 2025
Malicious code in bsb-family-pack2 (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in blackspammerbd1 (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in bsb-family-bot (PyPI)
1 compromised version
- Mar 18, 2025
Malicious code in @brix-crypto/crypto-js (npm)
1 compromised version
- Mar 18, 2025
Malicious code in python-socket-test (PyPI)
5 compromised versions
- Mar 18, 2025
Malicious code in logax (PyPI)
27 compromised versions
- Mar 18, 2025
Malicious code in axonify (PyPI)
7 compromised versions
- Mar 18, 2025
Malicious code in antlir2-docs (npm)
1 compromised version
- Mar 18, 2025
Malicious code in ember-inner-addon (npm)
- Mar 18, 2025
Malicious code in backjob (npm)
1 compromised version
- Mar 18, 2025
Malware in backjob
1 compromised version
- Mar 18, 2025
Malware in ember-inner-addon
1 compromised version
- Mar 18, 2025
Malware in @idme-components/component-utilities
1 compromised version
- Mar 18, 2025
Malware in vdkweb-utils
1 compromised version
- Mar 18, 2025
Malware in vladmandic
1 compromised version
- Mar 18, 2025
Malicious code in tasks_mangement (npm)
- Mar 18, 2025
Malware in tasks_mangement
1 compromised version
- Mar 18, 2025
Malicious code in tasks_viewer (npm)
4 compromised versions
- Mar 18, 2025
Malicious code in task_process (npm)
- Mar 18, 2025
Malicious code in input-process (npm)
- Mar 18, 2025
Malware in task_process
1 compromised version
- Mar 18, 2025
Malware in input-process
1 compromised version
- Mar 18, 2025
Malware in tasks_viewer
1 compromised version
- Mar 18, 2025
Malicious code in plasty (npm)
- Mar 18, 2025
Malicious code in importo (npm)
- Mar 18, 2025
Malicious code in gufferjs (npm)
- Mar 18, 2025
Malware in importo
1 compromised version
- Mar 18, 2025
Malware in gufferjs
1 compromised version
- Mar 18, 2025
Malware in plasty
1 compromised version
- Mar 18, 2025
Malicious code in wokes (npm)
- Mar 18, 2025
Malicious code in tokesjs (npm)
- Mar 18, 2025
Malicious code in tokes (npm)
- Mar 18, 2025
Malicious code in syncdaemon (npm)
- Mar 18, 2025
Malicious code in plast3y (npm)
- Mar 18, 2025
Malicious code in pendeck (npm)
- Mar 18, 2025
Malicious code in mysql_nlp (npm)
- Mar 18, 2025
Malicious code in connectrix (npm)
Page 6367 of 7,293