Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 28, 2025
Malicious code in sandstorm-widgets-nyse-website (npm)
3 compromised versions
- Jan 28, 2025
Malicious code in waltz-ng (npm)
3 compromised versions
- Jan 28, 2025
Malicious code in compound-protocol-alpha (npm)
- Jan 28, 2025
Malicious code in compound-protocol (npm)
- Jan 28, 2025
Malware in waltz-ng
1 compromised version
- Jan 28, 2025
Malware in compound-protocol
1 compromised version
- Jan 28, 2025
Malware in com.db.gtb.ppe.rtp-authjs
1 compromised version
- Jan 28, 2025
Malware in compound-protocol-alpha
1 compromised version
- Jan 28, 2025
Malware in venmo-ui
1 compromised version
- Jan 27, 2025
Malicious code in bindbc-loader (npm)
1 compromised version
- Jan 27, 2025
Malicious code in tomcrypt (npm)
1 compromised version
- Jan 27, 2025
Malicious code in dummy-loosesight-gc (npm)
1 compromised version
- Jan 27, 2025
Malicious code in @adsk-forks/jsonpath (npm)
1 compromised version
- Jan 26, 2025
Malicious code in monaco-npm (npm)
1 compromised version
- Jan 26, 2025
Malicious code in markitanalysis (PyPI)
2 compromised versions
- Jan 26, 2025
Malicious code in getpublicip (PyPI)
1 compromised version
- Jan 26, 2025
Malicious code in nord-security-task (npm)
1 compromised version
- Jan 26, 2025
Malicious code in swift-login-api (npm)
1 compromised version
- Jan 26, 2025
Malicious code in test-test-121333 (npm)
1 compromised version
- Jan 25, 2025
Malicious code in diffuse-the-rest (npm)
2 compromised versions
- Jan 25, 2025
Malicious code in pascoresend (npm)
4 compromised versions
- Jan 25, 2025
Malicious code in rqsts (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesttss (PyPI)
2 compromised versions
- Jan 25, 2025
Malicious code in requestsa (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in requesra (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in reques (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in reque (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in superline (PyPI)
1 compromised version
- Jan 25, 2025
Malicious code in casier (npm)
3 compromised versions
- Jan 24, 2025
Malicious code in web3-parser (npm)
- Jan 24, 2025
Malware in web3-parser
1 compromised version
- Jan 24, 2025
Malicious code in upm-ci-utils (npm)
- Jan 24, 2025
Malware in upm-ci-utils
1 compromised version
- Jan 24, 2025
Malicious code in upm-npm (npm)
- Jan 24, 2025
Malicious code in com.unity.test.metadata-manager (npm)
- Jan 24, 2025
Malware in upm-npm
1 compromised version
- Jan 24, 2025
Malware in com.unity.test.metadata-manager
1 compromised version
- Jan 24, 2025
Malicious code in lexical-esm-nextjs (npm)
- Jan 24, 2025
Malware in lexical-esm-nextjs
1 compromised version
- Jan 24, 2025
Malware in mlb-site-core
1 compromised version
- Jan 24, 2025
Malicious code in ig-sonar-runner (npm)
- Jan 24, 2025
Malicious code in ig-release (npm)
- Jan 24, 2025
Malicious code in ig-lighthouse-to-influxdb (npm)
- Jan 24, 2025
Malicious code in ig-lighthouse-security-audits (npm)
4 compromised versions
- Jan 24, 2025
Malicious code in ig-grunt-maven-multi-deploy (npm)
- Jan 24, 2025
Malicious code in ig-ember-perf (npm)
- Jan 24, 2025
Malware in ig-lighthouse-to-influxdb
1 compromised version
- Jan 24, 2025
Malware in ig-ember-perf
1 compromised version
- Jan 24, 2025
Malware in ig-lighthouse-security-audits
1 compromised version
- Jan 24, 2025
Malware in ig-release
1 compromised version
Page 6445 of 7,308