Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Feb 3, 2025
Malicious code in com.unity.subsystemregistration (npm)
- Feb 3, 2025
Malicious code in com.unity.services.core (npm)
- Feb 3, 2025
Malicious code in cloudflare-workers-chatgpt-plugin-example (npm)
- Feb 3, 2025
Malicious code in cache-wranglerjs-binary (npm)
- Feb 3, 2025
Malicious code in cache-dependency-binary (npm)
- Feb 3, 2025
Malicious code in blocto (npm)
- Feb 3, 2025
Malicious code in arrayref (npm)
- Feb 3, 2025
Malicious code in alex_cloud (npm)
- Feb 3, 2025
Malicious code in action-npm-publish (npm)
- Feb 3, 2025
Malware in lighthousebenchmarks
1 compromised version
- Feb 3, 2025
Malware in com.unity.subsystemregistration
1 compromised version
- Feb 3, 2025
Malware in dbc-wiki
1 compromised version
- Feb 3, 2025
Malware in checkmkwebapiclient
1 compromised version
- Feb 3, 2025
Malware in cloudflare-workers-chatgpt-plugin-example
1 compromised version
- Feb 3, 2025
Malware in cache-dependency-binary
1 compromised version
- Feb 3, 2025
Malware in twitter-cldr-npm
1 compromised version
- Feb 3, 2025
Malware in git-scm.com
1 compromised version
- Feb 3, 2025
Malware in blocto
1 compromised version
- Feb 3, 2025
Malware in cache-wranglerjs-binary
1 compromised version
- Feb 3, 2025
Malware in updatelanguagefiles
1 compromised version
- Feb 3, 2025
Malware in worker-template-postgres
1 compromised version
- Feb 3, 2025
Malware in qiot
1 compromised version
- Feb 3, 2025
Malware in github-elements
1 compromised version
- Feb 3, 2025
Malware in com.unity.services.core
1 compromised version
- Feb 3, 2025
Malware in action-npm-publish
1 compromised version
- Feb 3, 2025
Malware in voc-dashboard
1 compromised version
- Feb 3, 2025
Malware in nft-transfer-transforme
1 compromised version
- Feb 3, 2025
Malware in nft-transfer-transformer
1 compromised version
- Feb 3, 2025
Malware in wallet-adapter-demo
1 compromised version
- Feb 3, 2025
Malware in turbolinks_jwt_test2
1 compromised version
- Feb 3, 2025
Malware in flux-example-chat
1 compromised version
- Feb 3, 2025
Malware in ontology-starter-react-app
1 compromised version
- Feb 3, 2025
Malware in mpl-token-metadata
1 compromised version
- Feb 3, 2025
Malware in alex_cloud
1 compromised version
- Feb 3, 2025
Malware in arrayref
1 compromised version
- Feb 3, 2025
Malicious code in worldcoin-grants-contracts (npm)
- Feb 3, 2025
Malicious code in whatsapp-otp-sample-server (npm)
- Feb 3, 2025
Malicious code in trading-frontend-demo (npm)
- Feb 3, 2025
Malicious code in sample-nodejs-vsk-with-adm (npm)
- Feb 3, 2025
Malicious code in puppetlabs-apt (npm)
- Feb 3, 2025
Malicious code in pkl.tmbundle (npm)
- Feb 3, 2025
Malicious code in perfolizer (npm)
- Feb 3, 2025
Malicious code in onchain-summer (npm)
- Feb 3, 2025
Malicious code in net8.0 (npm)
- Feb 3, 2025
Malicious code in microsoft-authentication-libraries-for-js (npm)
- Feb 3, 2025
Malicious code in kiosk-demo (npm)
- Feb 3, 2025
Malicious code in images.pages.dev (npm)
- Feb 3, 2025
Malicious code in grunt-contrib-coffe (npm)
- Feb 3, 2025
Malicious code in flow-templates (npm)
- Feb 3, 2025
Malicious code in deric-mesos (npm)
Page 6436 of 7,308