Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 28, 2025
Malicious code in vite_ruby_monorepo (npm)
3 compromised versions
- Feb 28, 2025
Malicious code in huma-contracts-v2 (npm)
1 compromised version
- Feb 28, 2025
Malicious code in all.en.js (npm)
- Feb 28, 2025
Malware in all.en.js
1 compromised version
- Feb 28, 2025
Malicious code in react-native-wallet-sdk-demo-app (npm)
1 compromised version
- Feb 28, 2025
Malicious code in azure_monitor_workbook_templates (npm)
2 compromised versions
- Feb 27, 2025
Malicious code in @c11-lib-ts/document-handler (npm)
1 compromised version
- Feb 27, 2025
Malicious code in fluentui-repo (npm)
1 compromised version
- Feb 25, 2025
Malicious code in kgmicolors (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in luno-cocoapods (RubyGems)
1 compromised version
- Feb 25, 2025
Malicious code in serverkeeper-verifier (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in timekeeper-verifier (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in tcloud-python-test (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in credential-python-sdk (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in acloud-client (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in time-service-checker (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-test (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-analyzer (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-server-analysis (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-check-server-get (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in time-check-server (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in tcloud-python-sdks (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in tclients-sdk (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in snapshot-photo (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in enumer-iam (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in awscloud-clients-core (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in amzclients-sdk (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in alicloud-client-sdk (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in alicloud-client (PyPI)
3 compromised versions
- Feb 25, 2025
Malicious code in acloud-clients (PyPI)
2 compromised versions
- Feb 25, 2025
Malicious code in acloud-client-uses (PyPI)
1 compromised version
- Feb 25, 2025
Malicious code in aclient-sdk (PyPI)
1 compromised version
- Feb 24, 2025
Malicious code in transaction-analyze (PyPI)
4 compromised versions
- Feb 24, 2025
Malicious code in transaction-analysis (PyPI)
3 compromised versions
- Feb 24, 2025
Malicious code in coingenerator (PyPI)
1 compromised version
- Feb 24, 2025
Malicious code in coinanalyze (PyPI)
3 compromised versions
- Feb 24, 2025
Malicious code in coinanalysis (PyPI)
1 compromised version
- Feb 23, 2025
Malicious code in main-branch-check (npm)
1 compromised version
- Feb 23, 2025
Malicious code in realtime-examples (npm)
1 compromised version
- Feb 23, 2025
Malicious code in twilio-realtime (npm)
1 compromised version
- Feb 23, 2025
Malicious code in edubrite (npm)
1 compromised version
- Feb 23, 2025
Malicious code in erc20-faucet (npm)
1 compromised version
- Feb 23, 2025
Malicious code in @maheshtestorg/maheshtestpackage (npm)
1 compromised version
- Feb 23, 2025
Malicious code in supera (npm)
2 compromised versions
- Feb 23, 2025
Malicious code in @supera/share (npm)
1 compromised version
- Feb 23, 2025
Malicious code in @supera/asjnakwndlja (npm)
1 compromised version
- Feb 23, 2025
Malicious code in @supera/aaaaaaaaaaa (npm)
1 compromised version
- Feb 23, 2025
Malicious code in zztest890 (npm)
2 compromised versions
- Feb 23, 2025
Malicious code in zztest82 (npm)
2 compromised versions
- Feb 23, 2025
Malicious code in zzmaliciouspackage (npm)
1 compromised version
Page 6400 of 7,293