Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 18, 2025
Malware in tokes
1 compromised version
- Mar 18, 2025
Malware in connectrix
1 compromised version
- Mar 18, 2025
Malware in tokesjs
1 compromised version
- Mar 18, 2025
Malware in wokes
1 compromised version
- Mar 18, 2025
Malware in plast3y
1 compromised version
- Mar 18, 2025
Malware in syncdaemon
1 compromised version
- Mar 18, 2025
Malware in pendeck
1 compromised version
- Mar 18, 2025
Malware in mysql_nlp
1 compromised version
- Mar 18, 2025
Malicious code in py_pool (npm)
- Mar 18, 2025
Malicious code in ex-edge (npm)
- Mar 18, 2025
Malicious code in cbridge (npm)
- Mar 18, 2025
Malware in cbridge
1 compromised version
- Mar 18, 2025
Malware in ex-edge
1 compromised version
- Mar 18, 2025
Malware in py_pool
1 compromised version
- Mar 18, 2025
Malicious code in solweb3 (npm)
- Mar 18, 2025
Malware in solweb3
1 compromised version
- Mar 18, 2025
Malicious code in sol-web3-utils (npm)
- Mar 18, 2025
Malware in sol-web3-utils
1 compromised version
- Mar 18, 2025
Malicious code in @theoretical123/providers (npm)
- Mar 18, 2025
Malware in @theoretical123/providers
1 compromised version
- Mar 18, 2025
Malicious code in @theoretical123/ssh2 (npm)
- Mar 18, 2025
Malicious code in @theoretical123/ethers (npm)
- Mar 18, 2025
Malware in @theoretical123/ssh2
1 compromised version
- Mar 18, 2025
Malware in @theoretical123/ethers
1 compromised version
- Mar 18, 2025
Malware in reproduction-hardhat
1 compromised version
- Mar 18, 2025
Malicious code in jupyter-optmwidgets (npm)
- Mar 18, 2025
Malware in jupyter-optmwidgets
1 compromised version
- Mar 18, 2025
Malicious code in gash (npm)
- Mar 18, 2025
Malware in gash
1 compromised version
- Mar 18, 2025
Malicious code in cortex-net-node (npm)
- Mar 18, 2025
Malicious code in cortex-app-utils (npm)
2 compromised versions
- Mar 18, 2025
Malware in cortex-app-utils
1 compromised version
- Mar 18, 2025
Malware in cortex-net-node
1 compromised version
- Mar 18, 2025
Malicious code in cortex-player-chromeoscortex (npm)
1 compromised version
- Mar 18, 2025
Malicious code in cortex-app-tutorial (npm)
1 compromised version
- Mar 18, 2025
Malware in cortex-app-tutorial
1 compromised version
- Mar 18, 2025
Malware in cortex-player-chromeoscortex
1 compromised version
- Mar 18, 2025
Malware in connector123
1 compromised version
- Mar 18, 2025
Malicious code in test111121112 (npm)
1 compromised version
- Mar 18, 2025
Malware in test111121112
1 compromised version
- Mar 18, 2025
Malicious code in vertex-core (npm)
1 compromised version
- Mar 18, 2025
Malicious code in threshold-usd (npm)
1 compromised version
- Mar 18, 2025
Malicious code in near-lake-raw-printer (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in near-crossword (npm)
- Mar 18, 2025
Malicious code in gatsby-starter-hello-world (npm)
- Mar 18, 2025
Malicious code in defi-handbook (npm)
1 compromised version
- Mar 18, 2025
Malicious code in com.unity.connect.share (npm)
- Mar 18, 2025
Malware in limit-order-validation
1 compromised version
- Mar 18, 2025
Malware in vertex-core
1 compromised version
- Mar 18, 2025
Malware in defi-handbook
1 compromised version
Page 6368 of 7,293