Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 13, 2025
Malware in solana-web3.js
1 compromised version
- Feb 13, 2025
Malware in node-tg-bot-sdk
1 compromised version
- Feb 13, 2025
Malware in hardhat-configs
1 compromised version
- Feb 13, 2025
Malware in grammyjs-utils
1 compromised version
- Feb 13, 2025
Malware in telegramclient-utils
1 compromised version
- Feb 13, 2025
Malware in victory-native-xl-monorepo
1 compromised version
- Feb 13, 2025
Malicious code in tenable-universal-layout (npm)
- Feb 13, 2025
Malware in tenable-universal-layout
1 compromised version
- Feb 13, 2025
Malware in marked-as
1 compromised version
- Feb 13, 2025
Malware in marked-at
1 compromised version
- Feb 13, 2025
Malware in node-telegram-sdk
1 compromised version
- Feb 13, 2025
Malware in node-telegram-bot-sdk
1 compromised version
- Feb 13, 2025
Malware in telegram-util
1 compromised version
- Feb 13, 2025
Malware in grammy-utils
1 compromised version
- Feb 13, 2025
Malicious code in openbet-player-api-sdk (npm)
- Feb 13, 2025
Malware in openbet-access-controller
1 compromised version
- Feb 13, 2025
Malware in openbet-player-api-sdk
1 compromised version
- Feb 13, 2025
Malicious code in uzx-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in uzx-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in uzx-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in uzx-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in biconomy-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in biconomy-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in biconomy-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in biconomy (npm)
1 compromised version
- Feb 13, 2025
Malicious code in deepcoin-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in deepcoin-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in deepcoin-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in deepcoin-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in deepcoin (npm)
1 compromised version
- Feb 13, 2025
Malicious code in ascendex-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in ascendex-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in ascendex-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in ascendex (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gemini-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gemini-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gemini-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in gemini-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitflyer-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitflyer-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitflyer-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitflyer-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in lbank-production (npm)
1 compromised version
- Feb 13, 2025
Malicious code in lbank-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in lbank-internal (npm)
1 compromised version
- Feb 13, 2025
Malicious code in lbank-dev (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitmart-test (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitmart-production (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitmart-main (npm)
1 compromised version
- Feb 13, 2025
Malicious code in bitmart-internal (npm)
1 compromised version
Page 6410 of 7,293