Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 4, 2025
Malware in upbit-production
1 compromised version
- Mar 4, 2025
Malware in upbit-main
1 compromised version
- Mar 4, 2025
Malware in upbit-dev
1 compromised version
- Mar 4, 2025
Malware in upbit-test
1 compromised version
- Mar 4, 2025
Malware in bitget-dev
1 compromised version
- Mar 4, 2025
Malicious code in upbit-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in upbit-internal
1 compromised version
- Mar 4, 2025
Malicious code in latoken-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in hashkey-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in latoken-main
1 compromised version
- Mar 4, 2025
Malware in hashkey-internal
1 compromised version
- Mar 4, 2025
Malware in latoken-test
1 compromised version
- Mar 4, 2025
Malware in latoken-dev
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-test (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-main (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-internal (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit-dev (npm)
1 compromised version
- Mar 4, 2025
Malicious code in whitebit (npm)
1 compromised version
- Mar 4, 2025
Malicious code in latoken-internal (npm)
1 compromised version
- Mar 4, 2025
Malware in whitebit-dev
1 compromised version
- Mar 4, 2025
Malware in latoken-internal
1 compromised version
- Mar 4, 2025
Malware in whitebit-test
1 compromised version
- Mar 4, 2025
Malware in whitebit-main
1 compromised version
- Mar 4, 2025
Malware in whitebit-internal
1 compromised version
- Mar 4, 2025
Malware in whitebit
1 compromised version
- Mar 4, 2025
Malicious code in connector123 (npm)
1 compromised version
- Mar 4, 2025
Malicious code in web3-2-alpha (npm)
1 compromised version
- Mar 4, 2025
Malicious code in safe-backend-integration (npm)
- Mar 4, 2025
Malicious code in morpho-blue-irm (npm)
1 compromised version
- Mar 4, 2025
Malicious code in link-outside-nest (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in celo-token-list (npm)
1 compromised version
- Mar 4, 2025
Malicious code in analyzer_plugin (npm)
2 compromised versions
- Mar 4, 2025
Malware in morpho-blue-irm
1 compromised version
- Mar 4, 2025
Malware in huma-contracts-v2
1 compromised version
- Mar 4, 2025
Malware in analyzer_plugin
1 compromised version
- Mar 4, 2025
Malware in safe-backend-integration
1 compromised version
- Mar 4, 2025
Malware in link-outside-nest
1 compromised version
- Mar 4, 2025
Malware in react-native-wallet-sdk-demo-app
1 compromised version
- Mar 4, 2025
Malware in web3-2-alpha
1 compromised version
- Mar 4, 2025
Malware in ufarm-evm-contracts
1 compromised version
- Mar 4, 2025
Malware in synapse-contracts
1 compromised version
- Mar 4, 2025
Malware in celo-token-list
1 compromised version
- Mar 4, 2025
Malicious code in webauthn-codelab (npm)
- Mar 4, 2025
Malicious code in vue-integration (npm)
- Mar 4, 2025
Malicious code in sample-action (npm)
- Mar 4, 2025
Malicious code in saml-sp-linking-sample (npm)
- Mar 4, 2025
Malicious code in safe-apps-list (npm)
1 compromised version
- Mar 4, 2025
Malicious code in pkl-lang.org (npm)
Page 6386 of 7,293