Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 3, 2025
Malware in custom-sign-in
1 compromised version
- Feb 3, 2025
Malware in perfolizer
1 compromised version
- Feb 3, 2025
Malware in grunt-contrib-coffe
1 compromised version
- Feb 3, 2025
Malware in browser-sign-in
1 compromised version
- Feb 3, 2025
Malware in net8.0
1 compromised version
- Feb 3, 2025
Malware in images.pages.dev
1 compromised version
- Feb 3, 2025
Malware in alpha-launcher
1 compromised version
- Feb 3, 2025
Malware in flow-templates
1 compromised version
- Feb 3, 2025
Malware in npm-website-example
1 compromised version
- Feb 3, 2025
Malware in deric-mesos
1 compromised version
- Feb 3, 2025
Malware in com.unity.ai.navigation
1 compromised version
- Feb 3, 2025
Malware in smartling-openapi-spec
1 compromised version
- Feb 3, 2025
Malware in axelar-presets
1 compromised version
- Feb 3, 2025
Malware in nlohmann-json
1 compromised version
- Feb 3, 2025
Malware in magic-enum
1 compromised version
- Feb 3, 2025
Malware in trading-frontend-demo
1 compromised version
- Feb 3, 2025
Malware in microsoft-authentication-libraries-for-js
1 compromised version
- Feb 3, 2025
Malware in worldcoin-grants-contracts
1 compromised version
- Feb 3, 2025
Malware in sample-nodejs-vsk-with-adm
1 compromised version
- Feb 3, 2025
Malware in onchain-summer
1 compromised version
- Feb 3, 2025
Malware in pkl.tmbundle
1 compromised version
- Feb 3, 2025
Malware in whatsapp-otp-sample-server
1 compromised version
- Feb 3, 2025
Malware in kiosk-demo
1 compromised version
- Feb 3, 2025
Malware in alex_v1
1 compromised version
- Feb 3, 2025
Malicious code in uniform-reliable-broadcast (npm)
- Feb 3, 2025
Malicious code in paypal-standard-integration-react-ib (npm)
- Feb 3, 2025
Malicious code in paypal-standard-integration (npm)
- Feb 3, 2025
Malicious code in paypal-server-sdk (npm)
- Feb 3, 2025
Malicious code in paypal-googlepay-advanced-integration (npm)
- Feb 3, 2025
Malicious code in node-terminal-contracts (npm)
- Feb 3, 2025
Malicious code in k6-es6 (npm)
- Feb 3, 2025
Malicious code in hiero-sdk-cpp (npm)
- Feb 3, 2025
Malicious code in facebook-pixel-for-wordpress (npm)
- Feb 3, 2025
Malicious code in ethereum-node-crawler (npm)
- Feb 3, 2025
Malicious code in developer-hub (npm)
- Feb 3, 2025
Malicious code in deribit-arbitrage-monitor (npm)
1 compromised version
- Feb 3, 2025
Malicious code in checksums (npm)
- Feb 3, 2025
Malicious code in checkout_sample (npm)
- Feb 3, 2025
Malicious code in anyswappoc (npm)
- Feb 3, 2025
Malware in k6-learn
1 compromised version
- Feb 3, 2025
Malware in k6-es6
1 compromised version
- Feb 3, 2025
Malware in hiero-sdk-cpp
1 compromised version
- Feb 3, 2025
Malware in checkout_sample
1 compromised version
- Feb 3, 2025
Malware in overture2osmjs
1 compromised version
- Feb 3, 2025
Malware in ember-nf-graph-examples
1 compromised version
- Feb 3, 2025
Malware in uniform-reliable-broadcast
1 compromised version
- Feb 3, 2025
Malware in paypal-standard-integration
1 compromised version
- Feb 3, 2025
Malware in vite-paypal
1 compromised version
- Feb 3, 2025
Malware in tomcrypt
1 compromised version
- Feb 3, 2025
Malware in ethereum-node-crawler
1 compromised version
Page 6422 of 7,293