Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 3, 2025
Malicious code in alrsnlaseast (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in account-eth (PyPI)
2 compromised versions
- Feb 3, 2025
Malicious code in zapzaperson (npm)
1 compromised version
- Feb 3, 2025
Malicious code in yandex-music-int (npm)
1 compromised version
- Feb 3, 2025
Malicious code in xapi_test (npm)
1 compromised version
- Feb 3, 2025
Malicious code in x509-escaping (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in wwswqee (npm)
6 compromised versions
- Feb 3, 2025
Malicious code in wundergraph-cosmo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in wt-fe-buz-utilities-url (npm)
1 compromised version
- Feb 3, 2025
Malicious code in wt-fe-buz-business-stoplimit (npm)
1 compromised version
- Feb 3, 2025
Malicious code in worqhat-tracker (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in whatsapp-reader (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in web_automation_golden (npm)
1 compromised version
- Feb 3, 2025
Malicious code in vanjavzjs (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ui-forms-embed-components-library (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ui-forms-embed-client-api (npm)
1 compromised version
- Feb 3, 2025
Malicious code in ts-parsec-repo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in timesketch (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in tesyeeyr76r74t (npm)
1 compromised version
- Feb 3, 2025
Malicious code in test-for-confirm-paths (npm)
1 compromised version
- Feb 3, 2025
Malicious code in system-remap (npm)
1 compromised version
- Feb 3, 2025
Malicious code in system-driver-scan (npm)
1 compromised version
- Feb 3, 2025
Malicious code in symlink_lib (npm)
1 compromised version
- Feb 3, 2025
Malicious code in starter-monorepo-microservices (npm)
1 compromised version
- Feb 3, 2025
Malicious code in stale-action (npm)
1 compromised version
- Feb 3, 2025
Malicious code in somewherethere (npm)
1 compromised version
- Feb 3, 2025
Malicious code in signup-ui-url-generator (npm)
1 compromised version
- Feb 3, 2025
Malicious code in security_solution (npm)
1 compromised version
- Feb 3, 2025
Malicious code in rtcstats-server (npm)
1 compromised version
- Feb 3, 2025
Malicious code in qwant-extension (npm)
1 compromised version
- Feb 3, 2025
Malicious code in pulumi-eks-hello-world (npm)
1 compromised version
- Feb 3, 2025
Malicious code in proton-shared (npm)
1 compromised version
- Feb 3, 2025
Malicious code in private-lib-bug-bounty2.0 (npm)
1 compromised version
- Feb 3, 2025
Malicious code in postject-copy (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in poc-creation (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in patrick-test (npm)
1 compromised version
- Feb 3, 2025
Malicious code in my-amazing-app (npm)
1 compromised version
- Feb 3, 2025
Malicious code in mozilla-addons-frontend (npm)
1 compromised version
- Feb 3, 2025
Malicious code in mongodb-chatbot-verified-answers (npm)
2 compromised versions
- Feb 3, 2025
Malicious code in module-stub (npm)
3 compromised versions
- Feb 3, 2025
Malicious code in model-viewer-space-opera (npm)
1 compromised version
- Feb 3, 2025
Malicious code in microsoft.netcore.universalwindowsplatform (npm)
1 compromised version
- Feb 3, 2025
Malicious code in microsoft.applicationinsights (npm)
1 compromised version
- Feb 3, 2025
Malicious code in micrometer-docs (npm)
4 compromised versions
- Feb 3, 2025
Malicious code in matlab-proxy (npm)
8 compromised versions
- Feb 3, 2025
Malicious code in magika-website (npm)
1 compromised version
- Feb 3, 2025
Malicious code in llm_demo (npm)
1 compromised version
- Feb 3, 2025
Malicious code in levitate-check-imports (npm)
1 compromised version
- Feb 3, 2025
Malicious code in left-pad-browser (npm)
1 compromised version
- Feb 3, 2025
Malicious code in jquery.pstrength (npm)
2 compromised versions
Page 6432 of 7,308