Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 10, 2024
Malicious code in error-stack-parsersasasa (npm)
1 compromised version
- Dec 10, 2024
Malicious code in lido-on-ethereum (npm)
1 compromised version
- Dec 10, 2024
Malicious code in dexter123 (npm)
1 compromised version
- Dec 10, 2024
Malicious code in keycloak-server (npm)
3 compromised versions
- Dec 10, 2024
Malicious code in keypair-layout-utils (npm)
- Dec 10, 2024
Malware in keypair-layout-utils
1 compromised version
- Dec 10, 2024
Malicious code in idkit-monorepo (npm)
1 compromised version
- Dec 10, 2024
Malicious code in lfs-au-website-build (npm)
1 compromised version
- Dec 10, 2024
Malicious code in core-registry-dashboardx (npm)
1 compromised version
- Dec 10, 2024
Malicious code in staticdocs-starter (npm)
1 compromised version
- Dec 10, 2024
Malicious code in binance-toolbox-nodejs (npm)
1 compromised version
- Dec 9, 2024
Malicious code in @wf-ceo/react-test-helpers (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in jekyll-doxy (npm)
1 compromised version
- Dec 9, 2024
Malicious code in tokenize-lib (npm)
1 compromised version
- Dec 9, 2024
Malicious code in passport-openpass-example (npm)
1 compromised version
- Dec 9, 2024
Malicious code in @wf-ceo/utilities (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in @neo-ds/neo-utils (npm)
1 compromised version
- Dec 9, 2024
Malicious code in promisified-resource-pool123 (npm)
2 compromised versions
- Dec 9, 2024
Malicious code in web-live-sdk (npm)
3 compromised versions
- Dec 9, 2024
Malicious code in dhp-logging-lib (npm)
1 compromised version
- Dec 9, 2024
Malicious code in com.unity.entities (npm)
1 compromised version
- Dec 9, 2024
Malicious code in com.unity.collections (npm)
1 compromised version
- Dec 9, 2024
Malicious code in @neo-ds/components (npm)
1 compromised version
- Dec 9, 2024
Malicious code in playwright-1.47 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in v5_2 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in playwright-1.46 (npm)
1 compromised version
- Dec 9, 2024
Malicious code in Modernzel.UI.WinForms (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForms (NuGet)
45 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForm (NuGet)
1 compromised version
- Dec 9, 2024
Malicious code in Gunа.Forms.Net (NuGet)
61 compromised versions
- Dec 9, 2024
Malicious code in Discord_Rpc.Net (NuGet)
52 compromised versions
- Dec 9, 2024
Malicious code in DiscordNetApi (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Bunifu.Form (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in urlcon (PyPI)
3 compromised versions
- Dec 9, 2024
Malicious code in unzipxz (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in treadtools (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in testlibrary128982 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in testerpackage123 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test128123612 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test-hwp-uwpp (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in test-hwp-uwp (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in taoreg (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in sysconx4 (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in solana-account-sdk (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in shokobo (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in rkpairip (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in rkjp (PyPI)
2 compromised versions
- Dec 9, 2024
Malicious code in rk-pairip (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in requestsuuuj (PyPI)
1 compromised version
- Dec 9, 2024
Malicious code in requests99999999 (PyPI)
1 compromised version
Page 6480 of 7,308