Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 20, 2025
Malicious code in woocommerce-gateway-plisio (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in ssb-test (npm)
6 compromised versions
- Jan 20, 2025
Malicious code in spark-ar-libs (npm)
- Jan 20, 2025
Malicious code in matic-child-subgraphs (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in markets-history-data (npm)
1 compromised version
- Jan 20, 2025
Malicious code in lib-wallet (npm)
1 compromised version
- Jan 20, 2025
Malicious code in is-array-iter (npm)
1 compromised version
- Jan 20, 2025
Malicious code in ie8-dom-define (npm)
- Jan 20, 2025
Malicious code in ethiopianlogos (npm)
- Jan 20, 2025
Malicious code in enum-bug-keys (npm)
- Jan 20, 2025
Malicious code in bc-bundle (npm)
3 compromised versions
- Jan 20, 2025
Malicious code in bbc-http-client (npm)
- Jan 20, 2025
Malicious code in air-dao (npm)
1 compromised version
- Jan 20, 2025
Malicious code in abstract-adapter (npm)
- Jan 20, 2025
Malware in bc-bundle
1 compromised version
- Jan 20, 2025
Malware in air-dao
1 compromised version
- Jan 20, 2025
Malware in markets-history-data
1 compromised version
- Jan 20, 2025
Malware in ie8-dom-define
1 compromised version
- Jan 20, 2025
Malware in matic-child-subgraphs
1 compromised version
- Jan 20, 2025
Malware in woocommerce-gateway-plisio
1 compromised version
- Jan 20, 2025
Malware in ethiopianlogos
1 compromised version
- Jan 20, 2025
Malware in abstract-adapter
1 compromised version
- Jan 20, 2025
Malware in enum-bug-keys
1 compromised version
- Jan 20, 2025
Malware in bbc-http-client
1 compromised version
- Jan 20, 2025
Malware in ssb-test
1 compromised version
- Jan 20, 2025
Malware in is-array-iter
1 compromised version
- Jan 20, 2025
Malware in lib-wallet
1 compromised version
- Jan 20, 2025
Malware in spark-ar-libs
1 compromised version
- Jan 20, 2025
Malicious code in vuepress-reading-time-extended (npm)
1 compromised version
- Jan 20, 2025
Malicious code in vscode-tcf-debug (npm)
1 compromised version
- Jan 20, 2025
Malicious code in tinywallet (npm)
1 compromised version
- Jan 20, 2025
Malicious code in pyroscope-oss (npm)
1 compromised version
- Jan 20, 2025
Malicious code in prh-rules (npm)
- Jan 20, 2025
Malicious code in nr-reports-core (npm)
1 compromised version
- Jan 20, 2025
Malicious code in lichess-org (npm)
- Jan 20, 2025
Malicious code in language-common (npm)
1 compromised version
- Jan 20, 2025
Malicious code in imports_exports (npm)
1 compromised version
- Jan 20, 2025
Malicious code in glia-widgets-ionic (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in glance-android-core-sdk (npm)
1 compromised version
- Jan 20, 2025
Malicious code in emoji-datasource-google-blob (npm)
1 compromised version
- Jan 20, 2025
Malicious code in dotgov-list (npm)
4 compromised versions
- Jan 20, 2025
Malicious code in devopt (npm)
- Jan 20, 2025
Malicious code in dbx-js-tools (npm)
2 compromised versions
- Jan 20, 2025
Malicious code in bbm-enterprise (npm)
1 compromised version
- Jan 20, 2025
Malicious code in atlaspack-transformer-string (npm)
1 compromised version
- Jan 20, 2025
Malicious code in api-extractor-lib1-test (npm)
- Jan 20, 2025
Malware in glance-android-core-sdk
1 compromised version
- Jan 20, 2025
Malware in tinywallet
1 compromised version
- Jan 20, 2025
Malware in language-common
1 compromised version
- Jan 20, 2025
Malware in electron-builder-13
1 compromised version
Page 6457 of 7,308