Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 18, 2025
Malware in my-amazing-app
1 compromised version
- Mar 18, 2025
Malware in threshold-usd
1 compromised version
- Mar 18, 2025
Malware in near-crossword
1 compromised version
- Mar 18, 2025
Malware in gatsby-starter-hello-world
1 compromised version
- Mar 18, 2025
Malware in actions-project-version-check
1 compromised version
- Mar 18, 2025
Malware in near-lake-raw-printer
1 compromised version
- Mar 18, 2025
Malware in com.unity.connect.share
1 compromised version
- Mar 18, 2025
Malicious code in sui-lending-protocol (npm)
1 compromised version
- Mar 18, 2025
Malicious code in picl-server (npm)
1 compromised version
- Mar 18, 2025
Malicious code in micropilot (npm)
1 compromised version
- Mar 18, 2025
Malicious code in com.github-glitchenzo.nugetforunity (npm)
1 compromised version
- Mar 18, 2025
Malware in picl-server
1 compromised version
- Mar 18, 2025
Malware in upload-testflight-action
1 compromised version
- Mar 18, 2025
Malware in micropilot
1 compromised version
- Mar 18, 2025
Malware in com.github-glitchenzo.nugetforunity
1 compromised version
- Mar 18, 2025
Malware in opstooling-js-style
1 compromised version
- Mar 18, 2025
Malware in crypto-invoicer
1 compromised version
- Mar 18, 2025
Malware in symphony-data-map
1 compromised version
- Mar 18, 2025
Malware in sui-lending-protocol
1 compromised version
- Mar 18, 2025
Malware in auth0-ai-js
1 compromised version
- Mar 18, 2025
Malicious code in paymentapiplatformservice-paypal (npm)
4 compromised versions
- Mar 18, 2025
Malicious code in invoiceitem-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in imagehostingserv-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malicious code in compliancereadserv-paypal (npm)
2 compromised versions
- Mar 18, 2025
Malware in imagehostingserv-paypal
1 compromised version
- Mar 18, 2025
Malware in adminauthserv-paypal
1 compromised version
- Mar 18, 2025
Malware in tommyboytesting
1 compromised version
- Mar 18, 2025
Malware in paymentapiplatformservice-paypal
1 compromised version
- Mar 18, 2025
Malware in invoiceread-paypal
1 compromised version
- Mar 18, 2025
Malware in userrelationship-paypal
1 compromised version
- Mar 18, 2025
Malware in invoiceitem-paypal
1 compromised version
- Mar 18, 2025
Malware in paymentlookup-paypal
1 compromised version
- Mar 18, 2025
Malware in paymentread-paypal
1 compromised version
- Mar 18, 2025
Malware in compliancereadserv-paypal
1 compromised version
- Mar 18, 2025
Malware in bankingbundleserv
1 compromised version
- Mar 18, 2025
Malware in userbridge-paypal
1 compromised version
- Mar 18, 2025
Malicious code in @accesshsc/access-forms-engine (npm)
2 compromised versions
- Mar 18, 2025
Malware in @accesshsc/access-forms-engine
1 compromised version
- Mar 18, 2025
Malicious code in ppcardmanagementv2serv (npm)
1 compromised version
- Mar 18, 2025
Malicious code in militaty-geza-blessed2025hondo (npm)
1 compromised version
- Mar 18, 2025
Malicious code in sendmoneyserv (npm)
1 compromised version
- Mar 18, 2025
Malicious code in idt-validation-paypal (npm)
1 compromised version
- Mar 18, 2025
Malicious code in paypalmeserv (npm)
1 compromised version
- Mar 17, 2025
Malicious code in xcepthttp (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in httpx-client (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in asynchttpx (PyPI)
1 compromised version
- Mar 17, 2025
Malicious code in com.unity.testtools.codecoverage (npm)
1 compromised version
- Mar 17, 2025
Malicious code in real-world1 (npm)
1 compromised version
- Mar 17, 2025
Malicious code in @flutterfire/source-ui-widgets (npm)
1 compromised version
- Mar 17, 2025
Malicious code in zhdex (npm)
Page 6369 of 7,293