Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 11, 2025
Malicious code in toobit-test (npm)
1 compromised version
- Feb 11, 2025
Malicious code in toobit-main (npm)
1 compromised version
- Feb 11, 2025
Malicious code in toobit-internal (npm)
1 compromised version
- Feb 11, 2025
Malicious code in toobit-dev (npm)
1 compromised version
- Feb 10, 2025
Malicious code in cros_infotest_1 (npm)
1 compromised version
- Feb 10, 2025
Malicious code in cros_infotest (npm)
1 compromised version
- Feb 10, 2025
Malware in sdg-indicators-usa
1 compromised version
- Feb 10, 2025
Malware in nodejs-paypal-checkout-demo
1 compromised version
- Feb 10, 2025
Malware in home-assignment
1 compromised version
- Feb 10, 2025
Malicious code in internallib_v789 (npm)
- Feb 10, 2025
Malware in internallib_v789
1 compromised version
- Feb 10, 2025
Malware in digitalexp-microfrontends-framework
1 compromised version
- Feb 10, 2025
Malware in digitalexp-datasource-definitions
1 compromised version
- Feb 10, 2025
Malware in digitalexp-components
1 compromised version
- Feb 10, 2025
Malicious code in reqmanagemedifdt (npm)
1 compromised version
- Feb 10, 2025
Malware in reqmanagemedifdt
1 compromised version
- Feb 10, 2025
Malware in gatsby-theme-tinker-tailor
1 compromised version
- Feb 10, 2025
Malicious code in 52471254zqdl55 (npm)
1 compromised version
- Feb 8, 2025
Malicious code in astronomios (PyPI)
1 compromised version
- Feb 8, 2025
Malicious code in astronomio (PyPI)
1 compromised version
- Feb 8, 2025
Malicious code in astrono2mio (PyPI)
1 compromised version
- Feb 8, 2025
Malicious code in updateuuid4 (PyPI)
1 compromised version
- Feb 8, 2025
Malicious code in vue-search-ui-demo (npm)
1 compromised version
- Feb 8, 2025
Malicious code in com.unity.2d.common (npm)
1 compromised version
- Feb 7, 2025
Malicious code in vhx-node-demo (npm)
1 compromised version
- Feb 7, 2025
Malicious code in hcpss (npm)
1 compromised version
- Feb 7, 2025
Malicious code in trufflevscode (npm)
1 compromised version
- Feb 7, 2025
Malware in trufflevscode
1 compromised version
- Feb 7, 2025
Malicious code in nodex123 (npm)
- Feb 7, 2025
Malware in nodex123
1 compromised version
- Feb 7, 2025
Malicious code in ing-feat-oct-components (npm)
1 compromised version
- Feb 7, 2025
Malware in dx-hotels-ui
1 compromised version
- Feb 7, 2025
Malware in ing-feat-oct-components
1 compromised version
- Feb 7, 2025
Malware in roro3
1 compromised version
- Feb 7, 2025
Malware in roro1
1 compromised version
- Feb 7, 2025
Malware in roro2
1 compromised version
- Feb 7, 2025
Malware in codat
1 compromised version
- Feb 7, 2025
Malware in securedrop
1 compromised version
- Feb 7, 2025
Malware in awsume
1 compromised version
- Feb 7, 2025
Malware in twilio.github.io
1 compromised version
- Feb 7, 2025
Malware in requests-async
1 compromised version
- Feb 7, 2025
Malware in bookingcom-database
1 compromised version
- Feb 7, 2025
Malware in bookingcom-cloud
1 compromised version
- Feb 7, 2025
Malware in bookingcom-connect
1 compromised version
- Feb 7, 2025
Malware in bookingcom-api-client
1 compromised version
- Feb 7, 2025
Malware in bookingcom-event
1 compromised version
- Feb 7, 2025
Malware in bookingcom-db
1 compromised version
- Feb 7, 2025
Malware in bookingcom-cache
1 compromised version
- Feb 7, 2025
Malware in bookingcom-checkout
1 compromised version
- Feb 7, 2025
Malware in bookingcom-auth
1 compromised version
Page 6412 of 7,293