Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,675 total · sorted newest first- Mar 11, 2025
Malware in relay-prototyping-tools
1 compromised version
- Mar 11, 2025
Malware in ai-verify-shared-library
1 compromised version
- Mar 11, 2025
Malware in simple-export-map
1 compromised version
- Mar 11, 2025
Malware in example-nodejs-express
1 compromised version
- Mar 11, 2025
Malware in custom-networking-behavior
1 compromised version
- Mar 11, 2025
Malware in @supera/share
1 compromised version
- Mar 11, 2025
Malware in @supera/asjnakwndlja
1 compromised version
- Mar 11, 2025
Malware in @supera/aaaaaaaaaaa
1 compromised version
- Mar 11, 2025
Malware in @supera/shared
1 compromised version
- Mar 11, 2025
Malicious code in cb4good (npm)
1 compromised version
- Mar 11, 2025
Malicious code in @partner-tech/pax-illustrations (npm)
2 compromised versions
- Mar 11, 2025
Malicious code in pixelary (npm)
6 compromised versions
- Mar 11, 2025
Malicious code in limit-order-validation (npm)
1 compromised version
- Mar 10, 2025
Malicious code in nyc-config (npm)
102 compromised versions
- Mar 10, 2025
Malicious code in atlas-user-monitor (npm)
2 compromised versions
- Mar 10, 2025
Malicious code in layouts-lib (npm)
1 compromised version
- Mar 10, 2025
Malicious code in atlas-websocket (npm)
6 compromised versions
- Mar 10, 2025
Malicious code in prblingd (npm)
2 compromised versions
- Mar 10, 2025
Malicious code in ccxt-mexc-futures (PyPI)
5 compromised versions
- Mar 10, 2025
Malicious code in patternfly-build (npm)
1 compromised version
- Mar 9, 2025
Malicious code in wiki-requests (PyPI)
3 compromised versions
- Mar 9, 2025
Malicious code in voipms-service (PyPI)
1 compromised version
- Mar 8, 2025
Malicious code in tlsclient3 (PyPI)
2 compromised versions
- Mar 8, 2025
Malicious code in zuaxnull (npm)
1 compromised version
- Mar 8, 2025
Malicious code in heroku-tl (PyPI)
15 compromised versions
- Mar 6, 2025
Malicious code in next-tab (npm)
1 compromised version
- Mar 6, 2025
Malicious code in testnet-contracts (npm)
1 compromised version
- Mar 6, 2025
Malicious code in realityspiral (npm)
1 compromised version
- Mar 6, 2025
Malicious code in poc-by-shahwar (RubyGems)
1 compromised version
- Mar 6, 2025
Malicious code in poc-genrateed-by-noob (RubyGems)
1 compromised version
- Mar 6, 2025
Malicious code in evil_gem (RubyGems)
1 compromised version
- Mar 6, 2025
Malicious code in sendbird-chat-sample-react (npm)
1 compromised version
- Mar 6, 2025
Malicious code in rif-lumino (npm)
1 compromised version
- Mar 6, 2025
Malicious code in @domons/test (npm)
1 compromised version
- Mar 6, 2025
Malicious code in wrap.scrt.network (npm)
1 compromised version
- Mar 6, 2025
Malicious code in depx-contract (npm)
1 compromised version
- Mar 6, 2025
Malicious code in midle-contracts (npm)
1 compromised version
- Mar 6, 2025
Malicious code in testsdvsdfsdf (npm)
3 compromised versions
- Mar 6, 2025
Malicious code in brunch-with-ember-reloaded (npm)
2 compromised versions
- Mar 6, 2025
Malware in brunch-with-ember-reloaded
1 compromised version
- Mar 6, 2025
Malware in realtime-examples
1 compromised version
- Mar 6, 2025
Malware in react-native-windows-repo
1 compromised version
- Mar 6, 2025
Malware in twilio-realtime
1 compromised version
- Mar 6, 2025
Malware in main-branch-check
1 compromised version
- Mar 6, 2025
Malware in mygcpconfusedfunctionpoctestpackage
1 compromised version
- Mar 6, 2025
Malware in myconfusedfunctionpoctestpackage
1 compromised version
- Mar 6, 2025
Malicious code in vtctld2 (npm)
- Mar 6, 2025
Malware in vtctld2
1 compromised version
- Mar 6, 2025
Malware in cloudsplaining
1 compromised version
- Mar 6, 2025
Malware in mkdocs-material
1 compromised version
Page 6381 of 7,294