Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 7, 2025
Malware in bookingcom-api-client
1 compromised version
- Feb 7, 2025
Malware in bookingcom-event
1 compromised version
- Feb 7, 2025
Malware in bookingcom-db
1 compromised version
- Feb 7, 2025
Malware in bookingcom-cache
1 compromised version
- Feb 7, 2025
Malware in bookingcom-checkout
1 compromised version
- Feb 7, 2025
Malware in bookingcom-auth
1 compromised version
- Feb 7, 2025
Malware in bookingcom-api
1 compromised version
- Feb 7, 2025
Malware in apple-tests
1 compromised version
- Feb 7, 2025
Malware in apple-user
1 compromised version
- Feb 7, 2025
Malware in apple-tools
1 compromised version
- Feb 7, 2025
Malware in bookingcom-analytics
1 compromised version
- Feb 7, 2025
Malware in apple-utils
1 compromised version
- Feb 7, 2025
Malware in bookingcom-admin
1 compromised version
- Feb 7, 2025
Malware in apple-sync
1 compromised version
- Feb 7, 2025
Malware in apple-sdk
1 compromised version
- Feb 7, 2025
Malware in apple-test
1 compromised version
- Feb 7, 2025
Malware in apple-payment
1 compromised version
- Feb 7, 2025
Malware in collapsible-group
1 compromised version
- Feb 7, 2025
Malicious code in presto-router-webui (npm)
1 compromised version
- Feb 7, 2025
Malware in presto-router-webui
1 compromised version
- Feb 7, 2025
Malicious code in my_confused_gcp_function_poc_package_v2 (npm)
- Feb 7, 2025
Malware in my_confused_gcp_function_poc_package_v2
1 compromised version
- Feb 7, 2025
Malware in casier
1 compromised version
- Feb 7, 2025
Malware in sample_cluster
1 compromised version
- Feb 7, 2025
Malware in ar2-common
1 compromised version
- Feb 7, 2025
Malicious code in zkwasm-poc (npm)
1 compromised version
- Feb 7, 2025
Malicious code in zkpay-plonky2-contract (npm)
2 compromised versions
- Feb 7, 2025
Malicious code in wasmer-term (npm)
1 compromised version
- Feb 7, 2025
Malicious code in sparo-real-repo-test (npm)
1 compromised version
- Feb 7, 2025
Malicious code in pnpm-sync-api-tests (npm)
2 compromised versions
- Feb 7, 2025
Malicious code in pistache-io (npm)
1 compromised version
- Feb 7, 2025
Malicious code in kvpair_db_upgrade (npm)
1 compromised version
- Feb 7, 2025
Malicious code in dex-api-library (npm)
1 compromised version
- Feb 7, 2025
Malicious code in cosmwasmjs-demo (npm)
1 compromised version
- Feb 7, 2025
Malware in zkwasm-poc
1 compromised version
- Feb 7, 2025
Malware in autogen_studio
1 compromised version
- Feb 7, 2025
Malware in cosmwasmjs-demo
1 compromised version
- Feb 7, 2025
Malware in sparo-real-repo-test
1 compromised version
- Feb 7, 2025
Malware in zkpay-plonky2-contract
1 compromised version
- Feb 7, 2025
Malware in pnpm-sync-api-tests
1 compromised version
- Feb 7, 2025
Malware in pistache-io
1 compromised version
- Feb 7, 2025
Malware in wasmer-term
1 compromised version
- Feb 7, 2025
Malware in dex-api-library
1 compromised version
- Feb 7, 2025
Malware in kvpair_db_upgrade
1 compromised version
- Feb 7, 2025
Malicious code in nebulagl-h3-hexagon-editing (npm)
3 compromised versions
- Feb 7, 2025
Malicious code in dojo_2 (npm)
4 compromised versions
- Feb 7, 2025
Malicious code in afip-example-api (npm)
1 compromised version
- Feb 7, 2025
Malware in dojo_2
1 compromised version
- Feb 7, 2025
Malware in afip-example-api
1 compromised version
- Feb 7, 2025
Malware in nebulagl-h3-hexagon-editing
1 compromised version
Page 6428 of 7,308