Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 6, 2024
Malicious code in para-gen (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in omgd (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in oclips (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in oclip (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in megai (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in gym-reschdule-combination (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in distpro (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in raylinks (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in neursts (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in raylink (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in mega-sparks (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in fairseqn (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in fairsequence (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in ic-flows-platform (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in ic-flow-platform (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in adandv (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in adandu (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in adanbu (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in tarsire (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in tarsie (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in tarseir (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in shaiduwkv (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in shadowkw (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in shadokv (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in salmonn (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in pysisyphes (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in pysisphus (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in physisyphus (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in mtvqa (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in jaqmc (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in hybrid-sd (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in hllm (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in emumonitor (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in e3po (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in decompopt (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in cryostar (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytemlperf (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in batchran (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in comcast.github.io (npm)
5 compromised versions
- Nov 6, 2024
Malicious code in tcms-malicious-package-test-1 (npm)
2 compromised versions
- Nov 6, 2024
Malicious code in dre-example (npm)
1 compromised version
- Nov 6, 2024
Malicious code in cs-deploy-helper (npm)
1 compromised version
- Nov 6, 2024
Malicious code in cs-base-component (npm)
1 compromised version
- Nov 6, 2024
Malicious code in bytepilot (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytedplus (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytedplus-rec (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytepilot-0-0-15 (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in solidty-coveage (npm)
- Nov 6, 2024
Malware in solidty-coveage
1 compromised version
- Nov 6, 2024
Malicious code in macaqua (PyPI)
1 compromised version
Page 6516 of 7,308