Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 13, 2025
Malware in orange-meets
1 compromised version
- Feb 13, 2025
Malware in gestalt-docs
1 compromised version
- Feb 13, 2025
Malware in ts-plugin-file-path-support
1 compromised version
- Feb 13, 2025
Malware in pages-e2e
1 compromised version
- Feb 13, 2025
Malicious code in pmmmwh (npm)
- Feb 13, 2025
Malicious code in fontsource (npm)
- Feb 13, 2025
Malware in fontsource
1 compromised version
- Feb 13, 2025
Malware in pmmmwh
1 compromised version
- Feb 13, 2025
Malicious code in rainhq (npm)
1 compromised version
- Feb 13, 2025
Malicious code in panter (npm)
- Feb 13, 2025
Malicious code in osae (npm)
- Feb 13, 2025
Malicious code in jbrowse (npm)
- Feb 13, 2025
Malicious code in heytap (npm)
1 compromised version
- Feb 13, 2025
Malicious code in genesys-richmedia (npm)
2 compromised versions
- Feb 13, 2025
Malware in panter
1 compromised version
- Feb 13, 2025
Malware in rainhq
1 compromised version
- Feb 13, 2025
Malware in osae
1 compromised version
- Feb 13, 2025
Malware in heytap
1 compromised version
- Feb 13, 2025
Malware in jbrowse
1 compromised version
- Feb 13, 2025
Malware in genesys-richmedia
1 compromised version
- Feb 13, 2025
Malicious code in prettyphoto (npm)
1 compromised version
- Feb 13, 2025
Malicious code in assisted-chat (npm)
3 compromised versions
- Feb 13, 2025
Malware in prettyphoto
1 compromised version
- Feb 13, 2025
Malware in assisted-chat
1 compromised version
- Feb 13, 2025
Malicious code in watchitoring (PyPI)
2 compromised versions
- Feb 13, 2025
Malicious code in systoring (PyPI)
10 compromised versions
- Feb 13, 2025
Malicious code in speedtestpython (PyPI)
1 compromised version
- Feb 13, 2025
Malicious code in moonitoring (PyPI)
1 compromised version
- Feb 13, 2025
Malicious code in asynctestpython (PyPI)
1 compromised version
- Feb 13, 2025
Malicious code in asyncconfigreader (PyPI)
2 compromised versions
- Feb 13, 2025
Malicious code in asyncaiosignal (PyPI)
3 compromised versions
- Feb 13, 2025
Malicious code in aiosignalasync (PyPI)
3 compromised versions
- Feb 13, 2025
Malicious code in multis (PyPI)
7 compromised versions
- Feb 13, 2025
Malicious code in computestpspeedcompcomp (PyPI)
1 compromised version
- Feb 13, 2025
Malicious code in computestpspeedcomp (PyPI)
5 compromised versions
- Feb 13, 2025
Malicious code in compute-st-speed (PyPI)
1 compromised version
- Feb 13, 2025
Malicious code in bprintoor (PyPI)
10 compromised versions
- Feb 13, 2025
Malicious code in bprinter (PyPI)
2 compromised versions
- Feb 13, 2025
Malicious code in holahackerone (npm)
2 compromised versions
- Feb 13, 2025
Malware in holahackerone
1 compromised version
- Feb 13, 2025
Malware in dummy-loosesight-gd
1 compromised version
- Feb 13, 2025
Malware in dummy-loosesight-gc
1 compromised version
- Feb 13, 2025
Malicious code in telegramclient-sdk (npm)
1 compromised version
- Feb 13, 2025
Malicious code in node-tg-bot-api (npm)
- Feb 13, 2025
Malicious code in grammyjs-sdk (npm)
- Feb 13, 2025
Malware in telegramclient-sdk
1 compromised version
- Feb 13, 2025
Malware in node-tg-bot-api
1 compromised version
- Feb 13, 2025
Malware in grammyjs-sdk
1 compromised version
- Feb 13, 2025
Malicious code in solana-web3.js (npm)
1 compromised version
- Feb 13, 2025
Malicious code in node-tg-bot-sdk (npm)
Page 6409 of 7,293