Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,383 total · sorted newest first- Dec 27, 2024
Malicious code in onyx-monorepo (npm)
2 compromised versions
- Dec 27, 2024
Malicious code in docu-scripts (npm)
1 compromised version
- Dec 27, 2024
Malicious code in comparison-interface (npm)
1 compromised version
- Dec 27, 2024
Malware in comparison-interface
1 compromised version
- Dec 27, 2024
Malware in sovryn
1 compromised version
- Dec 27, 2024
Malware in binance-toolbox-nodejs
1 compromised version
- Dec 27, 2024
Malware in docu-scripts
1 compromised version
- Dec 27, 2024
Malware in lfs-au-website-build
1 compromised version
- Dec 27, 2024
Malware in staticdocs-starter
1 compromised version
- Dec 27, 2024
Malware in load-secrets-action
1 compromised version
- Dec 27, 2024
Malware in onyx-monorepo
1 compromised version
- Dec 27, 2024
Malware in core-registry-dashboardx
1 compromised version
- Dec 27, 2024
Malware in idkit-monorepo
1 compromised version
- Dec 27, 2024
Malicious code in solc-bin (npm)
1 compromised version
- Dec 27, 2024
Malicious code in launchpad6-dev-ops (npm)
1 compromised version
- Dec 27, 2024
Malicious code in js-dos-template (npm)
1 compromised version
- Dec 27, 2024
Malicious code in casino-luzern-easter-fronten (npm)
- Dec 27, 2024
Malware in js-dos-template
1 compromised version
- Dec 27, 2024
Malware in tokenize-lib
1 compromised version
- Dec 27, 2024
Malware in jekyll-doxy
1 compromised version
- Dec 27, 2024
Malware in launchpad6-dev-ops
1 compromised version
- Dec 27, 2024
Malware in casino-luzern-easter-fronten
1 compromised version
- Dec 27, 2024
Malware in solc-bin
1 compromised version
- Dec 27, 2024
Malicious code in types-node (npm)
7 compromised versions
- Dec 27, 2024
Malware in types-node
1 compromised version
- Dec 26, 2024
Malicious code in aem-react-spa (npm)
1 compromised version
- Dec 26, 2024
Malicious code in zoomapps-texteditor-vuejs (npm)
1 compromised version
- Dec 26, 2024
Malicious code in sysfunc (PyPI)
8 compromised versions
- Dec 26, 2024
Malicious code in syscontrol (PyPI)
2 compromised versions
- Dec 26, 2024
Malicious code in subsys-client (PyPI)
2 compromised versions
- Dec 26, 2024
Malicious code in oscontrol (PyPI)
8 compromised versions
- Dec 26, 2024
Malicious code in opshub (PyPI)
1 compromised version
- Dec 26, 2024
Malicious code in contentsdk-node (npm)
1 compromised version
- Dec 26, 2024
Malicious code in nativescript-gainsight-px (npm)
2 compromised versions
- Dec 26, 2024
Malicious code in aws-iot-samples-util (npm)
1 compromised version
- Dec 26, 2024
Malicious code in com.db.gtb.ppe.rtp-authjs (npm)
2 compromised versions
- Dec 25, 2024
Malicious code in vscode-dotnet-sdk (npm)
1 compromised version
- Dec 25, 2024
Malicious code in v2raya (npm)
1 compromised version
- Dec 25, 2024
Malicious code in @awan_7715/model-viewer-space-opera (npm)
1 compromised version
- Dec 25, 2024
Malicious code in chaos-mesh-dashboard (npm)
1 compromised version
- Dec 25, 2024
Malicious code in twilio-voice-react-native-reference-server (npm)
1 compromised version
- Dec 25, 2024
Malicious code in mattermost-developer-documentation (npm)
1 compromised version
- Dec 25, 2024
Malicious code in dvd-for-aipc-rag (npm)
1 compromised version
- Dec 25, 2024
Malicious code in solidity-ibc (npm)
1 compromised version
- Dec 24, 2024
Malicious code in browseui (npm)
4 compromised versions
- Dec 24, 2024
Malicious code in stablecoin-aptos (npm)
1 compromised version
- Dec 24, 2024
Malicious code in rreqest (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in reqzest (PyPI)
2 compromised versions
- Dec 24, 2024
Malicious code in requeszs (PyPI)
1 compromised version
- Dec 24, 2024
Malicious code in reqiest (PyPI)
2 compromised versions
Page 6466 of 7,308