Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Jan 14, 2025
Malware in test-paypal
1 compromised version
- Jan 14, 2025
Malware in 000webhost-api-client
1 compromised version
- Jan 14, 2025
Malware in pobreiaia22
1 compromised version
- Jan 14, 2025
Malware in 000webhost-auth
1 compromised version
- Jan 14, 2025
Malware in uber-gateway
1 compromised version
- Jan 14, 2025
Malware in ebay-gateway
1 compromised version
- Jan 14, 2025
Malware in 000webhost-database
1 compromised version
- Jan 14, 2025
Malicious code in inspector-server (npm)
- Jan 14, 2025
Malicious code in data-planning-models (npm)
1 compromised version
- Jan 14, 2025
Malicious code in controller-utils (npm)
1 compromised version
- Jan 14, 2025
Malicious code in uber-auth (npm)
1 compromised version
- Jan 14, 2025
Malware in uber-auth
1 compromised version
- Jan 14, 2025
Malware in inspector-server
1 compromised version
- Jan 14, 2025
Malware in controller-utils
1 compromised version
- Jan 14, 2025
Malware in data-planning-models
1 compromised version
- Jan 14, 2025
Malicious code in reactnativecreativekitdemoo (npm)
- Jan 14, 2025
Malicious code in parentu (npm)
- Jan 14, 2025
Malicious code in olivergreen (npm)
- Jan 14, 2025
Malicious code in gha-update-image (npm)
- Jan 14, 2025
Malicious code in example-app-next (npm)
- Jan 14, 2025
Malicious code in daglavaa2 (npm)
- Jan 14, 2025
Malicious code in reqests (npm)
- Jan 14, 2025
Malware in squirreldisk-tauri
1 compromised version
- Jan 14, 2025
Malware in aauto-assign-team-action
1 compromised version
- Jan 14, 2025
Malware in parentu
1 compromised version
- Jan 14, 2025
Malware in example-app-next
1 compromised version
- Jan 14, 2025
Malware in gha-update-image
1 compromised version
- Jan 14, 2025
Malware in reactnativecreativekitdemoo
1 compromised version
- Jan 14, 2025
Malware in olivergreen
1 compromised version
- Jan 14, 2025
Malware in daglavaa2
1 compromised version
- Jan 14, 2025
Malware in auto-assign-team-actionn
1 compromised version
- Jan 14, 2025
Malware in reqests
1 compromised version
- Jan 13, 2025
Malicious code in free-joe (npm)
5 compromised versions
- Jan 13, 2025
Malware in free-joe
1 compromised version
- Jan 13, 2025
Malware in walletcore-gen
1 compromised version
- Jan 13, 2025
Malware in solanacore
1 compromised version
- Jan 13, 2025
Malware in solana-login
1 compromised version
- Jan 13, 2025
Malicious code in zqdl5554 (npm)
- Jan 13, 2025
Malicious code in zqdl5553 (npm)
- Jan 13, 2025
Malicious code in zqdl5552 (npm)
- Jan 13, 2025
Malicious code in zqdl55516 (npm)
- Jan 13, 2025
Malicious code in zqdl55513 (npm)
- Jan 13, 2025
Malicious code in zqdl55512 (npm)
- Jan 13, 2025
Malicious code in zqdl55511 (npm)
- Jan 13, 2025
Malicious code in zqdl5551 (npm)
- Jan 13, 2025
Malicious code in zqdl0 (npm)
- Jan 13, 2025
Malware in zqdl555
1 compromised version
- Jan 13, 2025
Malware in zqdl55516
1 compromised version
- Jan 13, 2025
Malware in zqdl5551
1 compromised version
- Jan 13, 2025
Malware in zqdl5554
1 compromised version
Page 6462 of 7,308