Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 4, 2025
Malicious code in ddataflow (npm)
1 compromised version
- Mar 4, 2025
Malicious code in pythonhttp (PyPI)
2 compromised versions
- Mar 4, 2025
Malicious code in vue-custom-widget-template1 (npm)
- Mar 4, 2025
Malicious code in v1ue-custom-widget-template (npm)
- Mar 4, 2025
Malicious code in testaaa11 (npm)
- Mar 4, 2025
Malicious code in nnnn1111222 (npm)
- Mar 4, 2025
Malicious code in my-custom-vue-widget (npm)
- Mar 4, 2025
Malicious code in amis-widget77777 (npm)
- Mar 4, 2025
Malicious code in amis-widget333 (npm)
- Mar 4, 2025
Malware in amis-widget77777
1 compromised version
- Mar 4, 2025
Malware in my-custom-vue-widget
1 compromised version
- Mar 4, 2025
Malware in nnnn1111222
1 compromised version
- Mar 4, 2025
Malware in testaaa11
1 compromised version
- Mar 4, 2025
Malware in v1ue-custom-widget-template
1 compromised version
- Mar 4, 2025
Malware in vue-custom-widget-template1
1 compromised version
- Mar 4, 2025
Malware in amis-widget333
1 compromised version
- Mar 4, 2025
Malicious code in amis-test1 (npm)
- Mar 4, 2025
Malware in amis-test1
1 compromised version
- Mar 4, 2025
Malicious code in mahesh.testpackage (npm)
- Mar 4, 2025
Malicious code in aws-ui-component-select (npm)
1 compromised version
- Mar 4, 2025
Malicious code in angular-identity-component (npm)
- Mar 4, 2025
Malicious code in al-schematics (npm)
- Mar 4, 2025
Malicious code in @siemens-ag/twodc-fonts (npm)
1 compromised version
- Mar 4, 2025
Malicious code in @fcss/ui-component-library (npm)
- Mar 4, 2025
Malicious code in @airtel-lego/sentry (npm)
1 compromised version
- Mar 4, 2025
Malware in @siemens-ag/twodc-fonts
1 compromised version
- Mar 4, 2025
Malware in @airtel-lego/sentry
1 compromised version
- Mar 4, 2025
Malware in @maheshtestorg/maheshtestpackage
1 compromised version
- Mar 4, 2025
Malware in mahesh.testpackage
1 compromised version
- Mar 4, 2025
Malware in al-schematics
1 compromised version
- Mar 4, 2025
Malware in @fcss/ui-component-library
1 compromised version
- Mar 4, 2025
Malware in aws-ui-component-select
1 compromised version
- Mar 4, 2025
Malware in angular-identity-component
1 compromised version
- Mar 4, 2025
Malicious code in wishorn-log (npm)
- Mar 4, 2025
Malware in wishorn-log
1 compromised version
- Mar 4, 2025
Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)
1 compromised version
- Mar 4, 2025
Malware in amazon-codewhisperer-jupyterlab-ext
1 compromised version
- Mar 4, 2025
Malicious code in toloka-ui (npm)
6 compromised versions
- Mar 4, 2025
Malicious code in blackhoole (npm)
2 compromised versions
- Mar 4, 2025
Malware in toloka-ui
1 compromised version
- Mar 4, 2025
Malware in blackhoole
1 compromised version
- Mar 4, 2025
Malicious code in sol-web3-bundler (npm)
- Mar 4, 2025
Malicious code in bsc-web3-bundler (npm)
- Mar 4, 2025
Malware in bsc-web3-bundler
1 compromised version
- Mar 4, 2025
Malware in sol-web3-bundler
1 compromised version
- Mar 4, 2025
Malicious code in @cdplinetest/user-account-spec (npm)
2 compromised versions
- Mar 4, 2025
Malware in @cdplinetest/user-account-spec
1 compromised version
- Mar 4, 2025
Malicious code in provider-wallet (npm)
- Mar 4, 2025
Malware in provider-wallet
1 compromised version
- Mar 4, 2025
Malicious code in @ton-wallet/create (npm)
Page 6384 of 7,293