Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Mar 3, 2025
Malicious code in trongridpy (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in ransomware (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in randomuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in maliciouspkg (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in fakeuseragent (PyPI)
1 compromised version
- Mar 3, 2025
Malicious code in envvenuma (PyPI)
3 compromised versions
- Mar 3, 2025
Malicious code in aurm-python-sdk (PyPI)
16 compromised versions
- Mar 3, 2025
Malicious code in aurm-desktop-client (PyPI)
4 compromised versions
- Mar 3, 2025
Malicious code in wpcom-checkout (npm)
1 compromised version
- Mar 3, 2025
Malicious code in worldpay-raft-connector (npm)
1 compromised version
- Mar 3, 2025
Malicious code in workerd-linux-arm64 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in wg-fps-stats (npm)
9 compromised versions
- Mar 3, 2025
Malicious code in web-attendant (npm)
1 compromised version
- Mar 3, 2025
Malicious code in vuepress-plugin-test-analytics (npm)
1 compromised version
- Mar 3, 2025
Malicious code in upm-template-utils (npm)
8 compromised versions
- Mar 3, 2025
Malicious code in unityeditor-collab-toolbar (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unityeditor-collab-history (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unityeditor-cloud-hub (npm)
1 compromised version
- Mar 3, 2025
Malicious code in unity-editor-home (npm)
1 compromised version
- Mar 3, 2025
Malicious code in typespec-ts-interface-emitter (npm)
1 compromised version
- Mar 3, 2025
Malicious code in tsign-uix (npm)
1 compromised version
- Mar 3, 2025
Malicious code in tsign-ui (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in tidebot (npm)
1 compromised version
- Mar 3, 2025
Malicious code in testingthebreez (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sysaid-query-data (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sysaid-components-lib (npm)
1 compromised version
- Mar 3, 2025
Malicious code in stylex-monorepo (npm)
5 compromised versions
- Mar 3, 2025
Malicious code in secure-install-package (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-polygon (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-near (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-ltc (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-hbar (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-ethw (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-eth2 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-eth (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-etc (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-eos (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-dot (npm)
2 compromised versions
- Mar 3, 2025
Malicious code in sdk-coin-doge (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-dash (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-cspr (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-celo (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sdk-coin-btg (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sasdsdasdsdsda (npm)
1 compromised version
- Mar 3, 2025
Malicious code in sally-fw (npm)
1 compromised version
- Mar 3, 2025
Malicious code in reqmanagementui (npm)
1 compromised version
- Mar 3, 2025
Malicious code in req-management-ui (npm)
1 compromised version
- Mar 3, 2025
Malicious code in react-v18 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in react-redux-v8 (npm)
1 compromised version
- Mar 3, 2025
Malicious code in react-dom-v18 (npm)
1 compromised version
Page 6388 of 7,293