Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 17, 2025
Malware in zhdex
1 compromised version
- Mar 17, 2025
Malicious code in you-test-vue7 (npm)
- Mar 17, 2025
Malicious code in you-test-vue6 (npm)
- Mar 17, 2025
Malicious code in you-test-vue5 (npm)
- Mar 17, 2025
Malicious code in you-test-test-vue (npm)
- Mar 17, 2025
Malware in you-test-vue6
1 compromised version
- Mar 17, 2025
Malware in you-test-vue5
1 compromised version
- Mar 17, 2025
Malware in you-test-test-vue
1 compromised version
- Mar 17, 2025
Malware in you-test-vue7
1 compromised version
- Mar 17, 2025
Malware in sip.js-v2
1 compromised version
- Mar 17, 2025
Malware in ringcentral-web-phone-v2
1 compromised version
- Mar 17, 2025
Malware in pixelary
1 compromised version
- Mar 17, 2025
Malicious code in pdftodoc (npm)
- Mar 17, 2025
Malware in pdftodoc
1 compromised version
- Mar 17, 2025
Malware in nanovest-portal
1 compromised version
- Mar 17, 2025
Malware in agora-rtc-web
1 compromised version
- Mar 17, 2025
Malicious code in malwaretesting2 (npm)
- Mar 17, 2025
Malware in malwaretesting1
1 compromised version
- Mar 17, 2025
Malware in malwaretest
1 compromised version
- Mar 17, 2025
Malware in malwaretesting2
1 compromised version
- Mar 17, 2025
Malicious code in shorterapp (npm)
- Mar 17, 2025
Malicious code in homeappserver (npm)
- Mar 17, 2025
Malicious code in eslint8_flat_config_mjs (npm)
- Mar 17, 2025
Malicious code in datamations (npm)
- Mar 17, 2025
Malicious code in attacktree (npm)
- Mar 17, 2025
Malware in pages14.0.0_i18n
1 compromised version
- Mar 17, 2025
Malware in datamations
1 compromised version
- Mar 17, 2025
Malware in homeappserver
1 compromised version
- Mar 17, 2025
Malware in attacktree
1 compromised version
- Mar 17, 2025
Malware in shorterapp
1 compromised version
- Mar 17, 2025
Malware in eslint7_0
1 compromised version
- Mar 17, 2025
Malware in eslint8_flat_config_mjs
1 compromised version
- Mar 17, 2025
Malware in qaboard
1 compromised version
- Mar 17, 2025
Malware in subnplanmgmtserv
1 compromised version
- Mar 17, 2025
Malicious code in ramp-tax-info-ui (npm)
1 compromised version
- Mar 17, 2025
Malicious code in coral-typescript-types-pieces (npm)
1 compromised version
- Mar 17, 2025
Malware in subscriptionmgmtserv
1 compromised version
- Mar 17, 2025
Malware in orchestration-types
1 compromised version
- Mar 17, 2025
Malware in buttonfactoryserv-paypal
1 compromised version
- Mar 17, 2025
Malware in snap-design-system-icons
1 compromised version
- Mar 17, 2025
Malware in aws-features-signin-proxy-client
1 compromised version
- Mar 17, 2025
Malware in configs-web-react
1 compromised version
- Mar 17, 2025
Malware in coral-typescript-types-pieces
1 compromised version
- Mar 17, 2025
Malware in ramp-tax-info-ui
1 compromised version
- Mar 17, 2025
Malicious code in career-craft (npm)
1 compromised version
- Mar 17, 2025
Malware in career-craft
1 compromised version
- Mar 17, 2025
Malicious code in probe.gl-monorepo (npm)
1 compromised version
- Mar 17, 2025
Malware in ocular-monorepo
1 compromised version
- Mar 17, 2025
Malware in probe.gl-monorepo
1 compromised version
- Mar 17, 2025
Malicious code in usedin1calculatedmember.js (npm)
1 compromised version
Page 6370 of 7,293