Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,011 total · sorted newest first- Mar 18, 2025
Malicious code in @brix-crypto/crypto-js (npm)
1 compromised version
- Mar 18, 2025
Malicious code in python-socket-test (PyPI)
5 compromised versions
- Mar 18, 2025
Malicious code in logax (PyPI)
27 compromised versions
- Mar 18, 2025
Malicious code in axonify (PyPI)
7 compromised versions
- Mar 18, 2025
Malicious code in antlir2-docs (npm)
1 compromised version
- Mar 18, 2025
Malicious code in ember-inner-addon (npm)
- Mar 18, 2025
Malicious code in backjob (npm)
1 compromised version
- Mar 18, 2025
Malware in backjob
1 compromised version
- Mar 18, 2025
Malware in ember-inner-addon
1 compromised version
- Mar 18, 2025
Malware in @idme-components/component-utilities
1 compromised version
- Mar 18, 2025
Malware in vdkweb-utils
1 compromised version
- Mar 18, 2025
Malware in vladmandic
1 compromised version
- Mar 18, 2025
Malicious code in tasks_mangement (npm)
- Mar 18, 2025
Malware in tasks_mangement
1 compromised version
- Mar 18, 2025
Malicious code in tasks_viewer (npm)
4 compromised versions
- Mar 18, 2025
Malicious code in task_process (npm)
- Mar 18, 2025
Malicious code in input-process (npm)
- Mar 18, 2025
Malware in task_process
1 compromised version
- Mar 18, 2025
Malware in input-process
1 compromised version
- Mar 18, 2025
Malware in tasks_viewer
1 compromised version
- Mar 18, 2025
Malicious code in plasty (npm)
- Mar 18, 2025
Malicious code in importo (npm)
- Mar 18, 2025
Malicious code in gufferjs (npm)
- Mar 18, 2025
Malware in importo
1 compromised version
- Mar 18, 2025
Malware in gufferjs
1 compromised version
- Mar 18, 2025
Malware in plasty
1 compromised version
- Mar 18, 2025
Malicious code in wokes (npm)
- Mar 18, 2025
Malicious code in tokesjs (npm)
- Mar 18, 2025
Malicious code in tokes (npm)
- Mar 18, 2025
Malicious code in syncdaemon (npm)
- Mar 18, 2025
Malicious code in plast3y (npm)
- Mar 18, 2025
Malicious code in pendeck (npm)
- Mar 18, 2025
Malicious code in mysql_nlp (npm)
- Mar 18, 2025
Malicious code in connectrix (npm)
- Mar 18, 2025
Malware in tokes
1 compromised version
- Mar 18, 2025
Malware in connectrix
1 compromised version
- Mar 18, 2025
Malware in tokesjs
1 compromised version
- Mar 18, 2025
Malware in wokes
1 compromised version
- Mar 18, 2025
Malware in plast3y
1 compromised version
- Mar 18, 2025
Malware in syncdaemon
1 compromised version
- Mar 18, 2025
Malware in pendeck
1 compromised version
- Mar 18, 2025
Malware in mysql_nlp
1 compromised version
- Mar 18, 2025
Malicious code in py_pool (npm)
- Mar 18, 2025
Malicious code in ex-edge (npm)
- Mar 18, 2025
Malicious code in cbridge (npm)
- Mar 18, 2025
Malware in cbridge
1 compromised version
- Mar 18, 2025
Malware in ex-edge
1 compromised version
- Mar 18, 2025
Malware in py_pool
1 compromised version
- Mar 18, 2025
Malicious code in solweb3 (npm)
- Mar 18, 2025
Malware in solweb3
1 compromised version
Page 6375 of 7,301