Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 28, 2025
Malware in lsp-sample-client
1 compromised version
- Feb 28, 2025
Malware in package_events
1 compromised version
- Feb 28, 2025
Malware in issuecheck
1 compromised version
- Feb 28, 2025
Malware in infima-website
1 compromised version
- Feb 28, 2025
Malicious code in vinothzomato-foremandns (npm)
- Feb 28, 2025
Malicious code in typescript-fetch-test (npm)
- Feb 28, 2025
Malicious code in threads_api_sample (npm)
1 compromised version
- Feb 28, 2025
Malicious code in petstore-typescript-node-sample (npm)
- Feb 28, 2025
Malicious code in multipage-checkout (npm)
2 compromised versions
- Feb 28, 2025
Malicious code in ideal-paypal-payment-js-sdk (npm)
5 compromised versions
- Feb 28, 2025
Malicious code in golanci-lint-action (npm)
- Feb 28, 2025
Malicious code in financial-assistant (npm)
- Feb 28, 2025
Malicious code in com.google.play-games-pc (npm)
- Feb 28, 2025
Malicious code in binance-connector-ruby (npm)
- Feb 28, 2025
Malicious code in auth0-nodejs-webapp-sample-new-test (npm)
- Feb 28, 2025
Malware in typescript-fetch-test
1 compromised version
- Feb 28, 2025
Malware in binance-connector-ruby
1 compromised version
- Feb 28, 2025
Malware in auth0-nodejs-webapp-sample-new-test
1 compromised version
- Feb 28, 2025
Malware in petstore-typescript-node-sample
1 compromised version
- Feb 28, 2025
Malware in vinothzomato-foremandns
1 compromised version
- Feb 28, 2025
Malware in threads_api_sample
1 compromised version
- Feb 28, 2025
Malware in financial-assistant
1 compromised version
- Feb 28, 2025
Malware in golanci-lint-action
1 compromised version
- Feb 28, 2025
Malware in multipage-checkout
1 compromised version
- Feb 28, 2025
Malware in com.google.play-games-pc
1 compromised version
- Feb 28, 2025
Malware in ideal-paypal-payment-js-sdk
1 compromised version
- Feb 28, 2025
Malware in rust-analyzer
1 compromised version
- Feb 28, 2025
Malicious code in web-pw-sample-app (npm)
- Feb 28, 2025
Malicious code in vectorflow (npm)
- Feb 28, 2025
Malicious code in sui-cctp (npm)
- Feb 28, 2025
Malicious code in nft-minter (npm)
- Feb 28, 2025
Malicious code in js-example (npm)
- Feb 28, 2025
Malicious code in interchain-attestation-docs (npm)
- Feb 28, 2025
Malicious code in group-ui (npm)
- Feb 28, 2025
Malicious code in falcor-express-demo (npm)
- Feb 28, 2025
Malicious code in cosmos-web (npm)
- Feb 28, 2025
Malicious code in appauth-angular-app (npm)
- Feb 28, 2025
Malware in web-pw-sample-app
1 compromised version
- Feb 28, 2025
Malware in sui-cctp
1 compromised version
- Feb 28, 2025
Malware in cosmos-web
1 compromised version
- Feb 28, 2025
Malware in interchain-attestation-docs
1 compromised version
- Feb 28, 2025
Malware in js-example
1 compromised version
- Feb 28, 2025
Malware in group-ui
1 compromised version
- Feb 28, 2025
Malware in falcor-express-demo
1 compromised version
- Feb 28, 2025
Malware in vectorflow
1 compromised version
- Feb 28, 2025
Malware in com.unity.2d.common
1 compromised version
- Feb 28, 2025
Malware in appauth-angular-app
1 compromised version
- Feb 28, 2025
Malware in nft-minter
1 compromised version
- Feb 28, 2025
Malicious code in sddst-ui (npm)
- Feb 28, 2025
Malware in sddst-ui
1 compromised version
Page 6398 of 7,293