Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 4, 2025
Malware in @ton-wallet/create
1 compromised version
- Mar 4, 2025
Malicious code in @usaa-grp-ent-conv-platform/usaa (npm)
19 compromised versions
- Mar 4, 2025
Malware in @usaa-grp-ent-conv-platform/usaa
1 compromised version
- Mar 4, 2025
Malware in zztest82
1 compromised version
- Mar 4, 2025
Malware in zztest890
1 compromised version
- Mar 4, 2025
Malware in zzmaliciouspackage
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/standard-footer
1 compromised version
- Mar 4, 2025
Malicious code in lappsec-testpackage (npm)
1 compromised version
- Mar 4, 2025
Malicious code in kitchensink-ui-base (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/legacy-styleguide (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/legacy-nav-page-standard-wrapper (npm)
- Mar 4, 2025
Malicious code in @roku-web-ui/kitchensink-ui-base (npm)
4 compromised versions
- Mar 4, 2025
Malicious code in @roku-web-ui/header (npm)
- Mar 4, 2025
Malware in @roku-web-ui/legacy-nav-page-standard-wrapper
1 compromised version
- Mar 4, 2025
Malware in kitchensink-ui-base
1 compromised version
- Mar 4, 2025
Malware in lappsec-testpackage
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/header
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/modal
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/legacy-styleguide
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/pills
1 compromised version
- Mar 4, 2025
Malware in @roku-web-ui/kitchensink-ui-base
1 compromised version
- Mar 4, 2025
Malicious code in header-account-flyout (npm)
1 compromised version
- Mar 4, 2025
Malware in cse-common-arch--long-running-app--create-vm-cf
1 compromised version
- Mar 4, 2025
Malware in metamask-sdk-create-react-app
1 compromised version
- Mar 4, 2025
Malware in header-account-flyout
1 compromised version
- Mar 4, 2025
Malware in metamask-design-tokens-tailwind
1 compromised version
- Mar 4, 2025
Malware in zooplus
1 compromised version
- Mar 4, 2025
Malware in app_custom_pinterest
1 compromised version
- Mar 4, 2025
Malware in clubhouse-to-linear-exporter
1 compromised version
- Mar 4, 2025
Malware in int_pinterest_sfra
1 compromised version
- Mar 4, 2025
Malware in bm_pinterest
1 compromised version
- Mar 4, 2025
Malicious code in serum-anchor-wallet (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in raydium-sdk-liquidity-init (npm)
- Mar 4, 2025
Malicious code in gas-fee-saver (npm)
- Mar 4, 2025
Malicious code in cors_error_preventor (npm)
- Mar 4, 2025
Malware in cors_error_preventor
1 compromised version
- Mar 4, 2025
Malware in raydium-sdk-liquidity-init
1 compromised version
- Mar 4, 2025
Malware in serum-anchor-wallet
1 compromised version
- Mar 4, 2025
Malware in gas-fee-saver
1 compromised version
- Mar 4, 2025
Malicious code in upbit-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-production (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in upbit-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-internal (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in bitget (npm)
1 compromised version
- Mar 4, 2025
Malware in bitget-internal
1 compromised version
- Mar 4, 2025
Malware in bitget
1 compromised version
- Mar 4, 2025
Malware in bitget-main
1 compromised version
Page 6385 of 7,293