Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 19, 2025
Malware in mygcpconfusedfunctionpocmaliciouspackage
1 compromised version
- Feb 19, 2025
Malicious code in modulous (npm)
1 compromised version
- Feb 19, 2025
Malicious code in buzzblocks (npm)
1 compromised version
- Feb 19, 2025
Malware in pascoresend
1 compromised version
- Feb 19, 2025
Malware in modulous
1 compromised version
- Feb 19, 2025
Malware in theice
1 compromised version
- Feb 19, 2025
Malware in buzzblocks
1 compromised version
- Feb 19, 2025
Malicious code in string-width-aliased (npm)
- Feb 19, 2025
Malicious code in jquery-real (npm)
- Feb 19, 2025
Malicious code in jetpack-e2e-commons (npm)
- Feb 19, 2025
Malware in jquery-real
1 compromised version
- Feb 19, 2025
Malware in string-width-aliased
1 compromised version
- Feb 19, 2025
Malware in jetpack-e2e-commons
1 compromised version
- Feb 19, 2025
Malicious code in truecaller-profile-validation (npm)
2 compromised versions
- Feb 19, 2025
Malicious code in publish-private-provider-action (npm)
1 compromised version
- Feb 19, 2025
Malicious code in gurubu (npm)
4 compromised versions
- Feb 19, 2025
Malware in publish-private-provider-action
1 compromised version
- Feb 19, 2025
Malware in vhx-node-demo
1 compromised version
- Feb 19, 2025
Malware in truecaller-profile-validation
1 compromised version
- Feb 19, 2025
Malware in gurubu
1 compromised version
- Feb 19, 2025
Malware in vue-search-ui-demo
1 compromised version
- Feb 19, 2025
Malicious code in gutenberg-kit (npm)
1 compromised version
- Feb 19, 2025
Malicious code in go-bazel (npm)
1 compromised version
- Feb 19, 2025
Malware in go-bazel
1 compromised version
- Feb 19, 2025
Malware in gutenberg-kit
1 compromised version
- Feb 19, 2025
Malicious code in simulateur-gas (npm)
- Feb 19, 2025
Malicious code in simulateur-de-don (npm)
- Feb 19, 2025
Malicious code in get-gas-oracle (npm)
- Feb 19, 2025
Malicious code in gas-oracler (npm)
- Feb 19, 2025
Malware in gas-oracler
1 compromised version
- Feb 19, 2025
Malware in get-gas-oracle
1 compromised version
- Feb 19, 2025
Malware in simulateur-de-don
1 compromised version
- Feb 19, 2025
Malware in simulateur-gas
1 compromised version
- Feb 19, 2025
Malicious code in sally-fn (npm)
4 compromised versions
- Feb 19, 2025
Malware in sally-fn
1 compromised version
- Feb 19, 2025
Malicious code in schedulermpastakash (npm)
1 compromised version
- Feb 19, 2025
Malicious code in react-native-android-library-simpl-sdk (npm)
1 compromised version
- Feb 19, 2025
Malicious code in pinot-controller-ui (npm)
1 compromised version
- Feb 19, 2025
Malicious code in norequest-akash (npm)
1 compromised version
- Feb 19, 2025
Malicious code in list-files-in-pr (npm)
1 compromised version
- Feb 19, 2025
Malware in list-files-in-pr
1 compromised version
- Feb 19, 2025
Malware in pinot-controller-ui
1 compromised version
- Feb 19, 2025
Malware in security-admin
1 compromised version
- Feb 19, 2025
Malware in norequest-akash
1 compromised version
- Feb 19, 2025
Malware in testbyakash2310xxxxxxxnowaympasti
1 compromised version
- Feb 19, 2025
Malware in react-native-simpl
1 compromised version
- Feb 19, 2025
Malware in kubernetes-jobs-javascript
1 compromised version
- Feb 19, 2025
Malware in schedulermpastakash
1 compromised version
- Feb 19, 2025
Malware in react-native-android-library-simpl-sdk
1 compromised version
- Feb 19, 2025
Malicious code in byted-player-service (npm)
Page 6402 of 7,293