Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 19, 2024
Malicious code in cdp-agentkit-monorepo (npm)
1 compromised version
- Dec 19, 2024
Malicious code in build-onchain-apps (npm)
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-monorepo
1 compromised version
- Dec 19, 2024
Malware in nextjs-app-router
1 compromised version
- Dec 19, 2024
Malware in cdp-wallet-manager
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-nodejs
1 compromised version
- Dec 19, 2024
Malware in build-onchain-apps
1 compromised version
- Dec 19, 2024
Malware in payment-tx-params-api
1 compromised version
- Dec 19, 2024
Malware in usdc.js
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-core
1 compromised version
- Dec 19, 2024
Malware in eip-681-qr-generator
1 compromised version
- Dec 19, 2024
Malware in goworker
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit
1 compromised version
- Dec 19, 2024
Malware in testing-bounty123
1 compromised version
- Dec 19, 2024
Malware in shyftportal
1 compromised version
- Dec 19, 2024
Malware in bounty123ay
1 compromised version
- Dec 19, 2024
Malicious code in metamodel-editor (npm)
2 compromised versions
- Dec 19, 2024
Malware in metamodel-editor
1 compromised version
- Dec 19, 2024
Malicious code in bitcoinjs-lib-v6 (npm)
2 compromised versions
- Dec 19, 2024
Malware in bitcoinjs-lib-v6
1 compromised version
- Dec 19, 2024
Malware in ba-graphics
1 compromised version
- Dec 19, 2024
Malicious code in xeno-api (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in upgrade-solara (npm)
7 compromised versions
- Dec 19, 2024
Malicious code in deathball (npm)
1 compromised version
- Dec 19, 2024
Malicious code in core-builder (npm)
1 compromised version
- Dec 19, 2024
Malicious code in atlantis-api (npm)
2 compromised versions
- Dec 19, 2024
Malware in core-builder
1 compromised version
- Dec 19, 2024
Malware in upgrade-solara
1 compromised version
- Dec 19, 2024
Malware in xeno-api
1 compromised version
- Dec 19, 2024
Malware in deathball
1 compromised version
- Dec 19, 2024
Malware in atlantis-api
1 compromised version
- Dec 19, 2024
Malware in aries-bifold-root
1 compromised version
- Dec 19, 2024
Malicious code in upload-artifact (npm)
- Dec 19, 2024
Malicious code in setup-node (npm)
- Dec 19, 2024
Malicious code in go-dependency-submission (npm)
- Dec 19, 2024
Malicious code in deploy-pages (npm)
- Dec 19, 2024
Malicious code in dependency-review-action (npm)
- Dec 19, 2024
Malicious code in container-toolkit-template (npm)
- Dec 19, 2024
Malicious code in configure-pages (npm)
- Dec 19, 2024
Malicious code in actions-languageservices (npm)
- Dec 19, 2024
Malicious code in action-testtttt (npm)
- Dec 19, 2024
Malware in maven-dependency-submission-action
1 compromised version
- Dec 19, 2024
Malware in actions-languageservices
1 compromised version
- Dec 19, 2024
Malware in go-dependency-submission
1 compromised version
- Dec 19, 2024
Malware in action-testtttt
1 compromised version
- Dec 19, 2024
Malware in deploy-pages
1 compromised version
- Dec 19, 2024
Malware in container-toolkit-template
1 compromised version
- Dec 19, 2024
Malware in setup-node
1 compromised version
- Dec 19, 2024
Malware in configure-pages
1 compromised version
- Dec 19, 2024
Malware in dependency-review-action
1 compromised version
Page 6474 of 7,308