Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 17, 2025
Malicious code in yizhifabao59 (npm)
- Feb 17, 2025
Malware in yizhifabao63
1 compromised version
- Feb 17, 2025
Malware in yizhifabao62
1 compromised version
- Feb 17, 2025
Malware in yizhifabao59
1 compromised version
- Feb 17, 2025
Malware in yizhifabao60
1 compromised version
- Feb 17, 2025
Malware in yizhifabao61
1 compromised version
- Feb 17, 2025
Malicious code in yizhifabao58 (npm)
- Feb 17, 2025
Malicious code in yizhifabao57 (npm)
- Feb 17, 2025
Malicious code in yizhifabao56 (npm)
- Feb 17, 2025
Malicious code in yizhifabao55 (npm)
- Feb 17, 2025
Malicious code in tbasdzqdl55 (npm)
- Feb 17, 2025
Malware in tbasdzqdl55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao57
1 compromised version
- Feb 17, 2025
Malware in yizhifabao58
1 compromised version
- Feb 17, 2025
Malware in 52471254zqdl55
1 compromised version
- Feb 17, 2025
Malware in yizhifabao56
1 compromised version
- Feb 17, 2025
Malicious code in telegram-bots (npm)
- Feb 17, 2025
Malicious code in telegram-bot-hoster3 (npm)
- Feb 17, 2025
Malware in telegram-bot-hoster3
1 compromised version
- Feb 17, 2025
Malware in telegram-bots
1 compromised version
- Feb 17, 2025
Malicious code in telegram-bot-hoster2 (npm)
- Feb 17, 2025
Malicious code in telegram-bot-hoster (npm)
- Feb 17, 2025
Malicious code in telegram-bot-host (npm)
- Feb 17, 2025
Malicious code in telegram-bo-host (npm)
- Feb 17, 2025
Malware in telegram-bot-hoster2
1 compromised version
- Feb 17, 2025
Malware in telegram-bo-host
1 compromised version
- Feb 17, 2025
Malware in telegram-bot-host
1 compromised version
- Feb 17, 2025
Malware in telegram-bot-hoster
1 compromised version
- Feb 17, 2025
Malicious code in electron-dependency-confusion-window (npm)
- Feb 17, 2025
Malware in electron-dependency-confusion-window
1 compromised version
- Feb 17, 2025
Malicious code in rust-analyzer (npm)
1 compromised version
- Feb 15, 2025
Malicious code in dcbotoffline3 (PyPI)
2 compromised versions
- Feb 15, 2025
Malicious code in dcbot-online (PyPI)
1 compromised version
- Feb 14, 2025
Malicious code in network-utils-simple (PyPI)
19 compromised versions
- Feb 14, 2025
Malware in xeno.dll
1 compromised version
- Feb 14, 2025
Malware in solaraexecutor
1 compromised version
- Feb 13, 2025
Malicious code in dzengi (npm)
- Feb 13, 2025
Malware in dzengi
1 compromised version
- Feb 13, 2025
Malicious code in vidio-kmm (npm)
2 compromised versions
- Feb 13, 2025
Malware in vidio-kmm
1 compromised version
- Feb 13, 2025
Malware in sigma-payment
1 compromised version
- Feb 13, 2025
Malware in blynk-ide
1 compromised version
- Feb 13, 2025
Malware in bloomr-ts
1 compromised version
- Feb 13, 2025
Malware in swift-login-api
1 compromised version
- Feb 13, 2025
Malware in ibm.github.io
1 compromised version
- Feb 13, 2025
Malicious code in ts-plugin-file-path-support (npm)
1 compromised version
- Feb 13, 2025
Malicious code in pages-e2e (npm)
2 compromised versions
- Feb 13, 2025
Malicious code in orange-meets (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gestalt-docs (npm)
1 compromised version
Page 6408 of 7,293