Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 4, 2025
Malicious code in organizer-nodejs (npm)
- Mar 4, 2025
Malicious code in nncd (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in hh-sol-artifact-1 (npm)
- Mar 4, 2025
Malicious code in discord-getting-started (npm)
1 compromised version
- Mar 4, 2025
Malicious code in com.unity.2d.animation (npm)
4 compromised versions
- Mar 4, 2025
Malicious code in com.github-glitchenzo.nugetforunit (npm)
- Mar 4, 2025
Malware in com.github-glitchenzo.nugetforunit
1 compromised version
- Mar 4, 2025
Malware in sample-action
1 compromised version
- Mar 4, 2025
Malware in sample-schema-mgmt
1 compromised version
- Mar 4, 2025
Malware in com.unity.2d.animation
1 compromised version
- Mar 4, 2025
Malware in discord-getting-started
1 compromised version
- Mar 4, 2025
Malware in vue-integration
1 compromised version
- Mar 4, 2025
Malware in saml-sp-linking-sample
1 compromised version
- Mar 4, 2025
Malware in nncd
1 compromised version
- Mar 4, 2025
Malware in organizer-nodejs
1 compromised version
- Mar 4, 2025
Malware in webauthn-codelab
1 compromised version
- Mar 4, 2025
Malware in safe-apps-list
1 compromised version
- Mar 4, 2025
Malware in pkl-lang.org
1 compromised version
- Mar 4, 2025
Malware in hh-sol-artifact-1
1 compromised version
- Mar 4, 2025
Malicious code in connector-colaborator1 (npm)
1 compromised version
- Mar 4, 2025
Malicious code in connector-colaborator (npm)
1 compromised version
- Mar 4, 2025
Malicious code in unms-server (npm)
1 compromised version
- Mar 4, 2025
Malicious code in product-custom-grid-columns (npm)
1 compromised version
- Mar 4, 2025
Malicious code in aem-maven-archetype (npm)
1 compromised version
- Mar 4, 2025
Malicious code in qaboard (npm)
1 compromised version
- Mar 4, 2025
Malicious code in safe-client-gateway (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in learning-kotlin (npm)
1 compromised version
- Mar 4, 2025
Malicious code in atpw-reactive-form (npm)
1 compromised version
- Mar 4, 2025
Malicious code in subnplanmgmtserv (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in subscriptionmgmtserv (npm)
2 compromised versions
- Mar 4, 2025
Malicious code in buttonfactoryserv-paypal (npm)
4 compromised versions
- Mar 3, 2025
Malicious code in orchestration-types (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vdkweb-utils (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vladmandic (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in aws-features-signin-proxy-client (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in adyenaddon (npm)
1 compromised version
- Mar 3, 2025
Malicious code in calculated_members_message (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in timify-packager (npm)
1 compromised version
- Mar 3, 2025
Malicious code in configs-web-react (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in xuiniadb (PyPI)
10 compromised versions
- Mar 3, 2025
Malicious code in usvr-agent (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in useragents (PyPI)
2 compromised versions
- Mar 3, 2025
Malicious code in usar-agent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronyx (PyPI)
19 compromised versions
- Mar 3, 2025
Malicious code in tronx (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronwebpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpyweb (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronpynet (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronnetpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in tronlinkpy (PyPI)
1 compromised version
Page 6387 of 7,293