Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Feb 3, 2025
Malware in delete-deployments
1 compromised version
- Feb 3, 2025
Malware in intel-enterprise-rag-ui
1 compromised version
- Feb 3, 2025
Malware in paypal-server-sdk
1 compromised version
- Feb 3, 2025
Malware in bindbc-loader
1 compromised version
- Feb 3, 2025
Malware in anyswappoc
1 compromised version
- Feb 3, 2025
Malware in facebook-pixel-for-wordpress
1 compromised version
- Feb 3, 2025
Malware in developer-hub
1 compromised version
- Feb 3, 2025
Malware in paypal-googlepay-advanced-integration
1 compromised version
- Feb 3, 2025
Malware in monaco-npm
1 compromised version
- Feb 3, 2025
Malware in lldb-dap
1 compromised version
- Feb 3, 2025
Malware in deribit-arbitrage-monitor
1 compromised version
- Feb 3, 2025
Malware in browser-nextjs
1 compromised version
- Feb 3, 2025
Malware in paypal-standard-integration-react-ib
1 compromised version
- Feb 3, 2025
Malware in css-blocks-monorepo
1 compromised version
- Feb 3, 2025
Malware in node-terminal-contracts
1 compromised version
- Feb 3, 2025
Malware in checksums
1 compromised version
- Feb 3, 2025
Malicious code in traceviz-angular-trace (npm)
- Feb 3, 2025
Malicious code in metamask-sdk-monorepo (npm)
- Feb 3, 2025
Malicious code in hire-task (npm)
- Feb 3, 2025
Malicious code in dna-mbc (npm)
1 compromised version
- Feb 3, 2025
Malware in types-safety-web
1 compromised version
- Feb 3, 2025
Malware in compiler-version
1 compromised version
- Feb 3, 2025
Malware in addon-sdk
1 compromised version
- Feb 3, 2025
Malware in test_package_file
1 compromised version
- Feb 3, 2025
Malware in auth0-langchain-rag-js
1 compromised version
- Feb 3, 2025
Malware in hire-task
1 compromised version
- Feb 3, 2025
Malware in pegin-address-verificator
1 compromised version
- Feb 3, 2025
Malware in dna-mbc
1 compromised version
- Feb 3, 2025
Malware in metamask-sdk-monorepo
1 compromised version
- Feb 3, 2025
Malware in check-release-dependencies
1 compromised version
- Feb 3, 2025
Malware in traceviz-angular-trace
1 compromised version
- Feb 3, 2025
Malware in node_package_runner
1 compromised version
- Feb 3, 2025
Malware in money-market
1 compromised version
- Feb 3, 2025
Malware in gateway-eth-ts
1 compromised version
- Feb 3, 2025
Malware in nord-security-task
1 compromised version
- Feb 3, 2025
Malware in common-test-utils
1 compromised version
- Feb 3, 2025
Malware in eslint-v9
1 compromised version
- Feb 3, 2025
Malware in no-style-dependency
1 compromised version
- Feb 3, 2025
Malware in showcase-server
1 compromised version
- Feb 3, 2025
Malware in eslint-config-scality
1 compromised version
- Feb 3, 2025
Malware in old-celo-base
1 compromised version
- Feb 3, 2025
Malicious code in base-encryption (npm)
1 compromised version
- Feb 3, 2025
Malware in base-encryption
1 compromised version
- Feb 3, 2025
Malware in tr46mine
1 compromised version
- Feb 3, 2025
Malware in extendmine
1 compromised version
- Feb 3, 2025
Malware in secure-toolbots
1 compromised version
- Feb 3, 2025
Malicious code in twenty7tec_client (npm)
1 compromised version
- Feb 3, 2025
Malicious code in lead-marketing-metadata (npm)
1 compromised version
- Feb 3, 2025
Malware in lead-marketing-metadata
1 compromised version
- Feb 3, 2025
Malware in twenty7tec_client
1 compromised version
Page 6423 of 7,293