Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Dec 4, 2024
Malware in com.immutable.marketplace
1 compromised version
- Dec 4, 2024
Malware in quorumnetworktester
1 compromised version
- Dec 4, 2024
Malware in basic-preset-minting
1 compromised version
- Dec 4, 2024
Malware in auto-cancel-redundant-job
1 compromised version
- Dec 4, 2024
Malware in generate-release-description
1 compromised version
- Dec 4, 2024
Malware in d1-northwind
1 compromised version
- Dec 4, 2024
Malware in veworld-mock
1 compromised version
- Dec 4, 2024
Malware in codat-docs
1 compromised version
- Dec 3, 2024
Malicious code in dcapps-cli (npm)
- Dec 3, 2024
Malware in dcapps-cli
1 compromised version
- Dec 3, 2024
Malicious code in @solana/web3.js (npm)
- Dec 3, 2024
Duplicate Advisory: Malware in @solana/web3.js
1 compromised version
- Dec 3, 2024
Malicious code in genz-translator (PyPI)
20 compromised versions
- Dec 3, 2024
Malicious code in @0xengine/xmlrpc (npm)
- Dec 3, 2024
Malware in @0xengine/xmlrpc
1 compromised version
- Dec 2, 2024
Malicious code in acm-nano-logger-fe (npm)
1 compromised version
- Dec 2, 2024
Malicious code in synch-prod-ai (npm)
6 compromised versions
- Dec 2, 2024
Malware in synch-prod-ai
1 compromised version
- Dec 2, 2024
Malicious code in @hmp/h-shelves (npm)
2 compromised versions
- Dec 2, 2024
Malicious code in @hmp/h-image-uploader (npm)
1 compromised version
- Dec 1, 2024
Malicious code in tauri-plugin-autostart-api (npm)
1 compromised version
- Dec 1, 2024
Malicious code in tailchat-service-swagger-generator (npm)
1 compromised version
- Dec 1, 2024
Malicious code in tailchat-service-openapi-generator (npm)
1 compromised version
- Dec 1, 2024
Malicious code in spinal-service-ticket (npm)
1 compromised version
- Dec 1, 2024
Malicious code in spinal-lib-organ-monitoring (npm)
1 compromised version
- Dec 1, 2024
Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)
1 compromised version
- Dec 1, 2024
Malicious code in my-service-manager (PyPI)
8 compromised versions
- Dec 1, 2024
Malicious code in my-main-manager (PyPI)
4 compromised versions
- Dec 1, 2024
Malicious code in spinal-env-viewer-graph-service (npm)
1 compromised version
- Dec 1, 2024
Malicious code in foop (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in datagov-harvester (PyPI)
2 compromised versions
- Dec 1, 2024
Malicious code in crowdstrike-foundry (PyPI)
3 compromised versions
- Dec 1, 2024
Malicious code in bancor-simulation (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in auth0-open-source-template (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in apache-airflow-providers-edge (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in omigo-data-analytics (PyPI)
1 compromised version
- Dec 1, 2024
Malicious code in spinal-core-connectorjs_type (npm)
1 compromised version
- Dec 1, 2024
Malicious code in spinal-core-connectorjs (npm)
1 compromised version
- Dec 1, 2024
Malicious code in readium-css (npm)
1 compromised version
- Dec 1, 2024
Malicious code in qt-construct (npm)
1 compromised version
- Dec 1, 2024
Malicious code in arcverc (npm)
1 compromised version
- Dec 1, 2024
Malicious code in @peakon/records (npm)
1 compromised version
- Dec 1, 2024
Malicious code in language-babel (npm)
1 compromised version
- Dec 1, 2024
Malicious code in h5bp-docs (npm)
1 compromised version
- Dec 1, 2024
Malicious code in fluid-tooltip (npm)
1 compromised version
- Dec 1, 2024
Malicious code in eslint-config-sunset-nodejs (npm)
1 compromised version
- Dec 1, 2024
Malicious code in demo-resources (npm)
1 compromised version
- Nov 30, 2024
Malicious code in fetlla2-js (npm)
5 compromised versions
- Nov 30, 2024
Malicious code in pycryptographylibv3 (PyPI)
1 compromised version
- Nov 30, 2024
Malicious code in pipcolorpkgv2 (PyPI)
1 compromised version
Page 6489 of 7,308