Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 6, 2024
Malicious code in tiketoken (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in macque (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in dbt-bytedhouse (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytep (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytesp (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in commitlint-plugin-jira-type-rules (npm)
1 compromised version
- Nov 6, 2024
Malicious code in dtb-bytehouse (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in machaque (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in nurset (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in dbt-byteshouse (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in habitmf (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytedps (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in tktoken (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in x2vmlgml (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in asmutation (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in bytekafka0-0-15 (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in lightsuq (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in laghtseq (PyPI)
1 compromised version
- Nov 6, 2024
Malicious code in @umreg/zxcvbn (npm)
1 compromised version
- Nov 6, 2024
Malicious code in soliditycoverag (npm)
- Nov 6, 2024
Malware in soliditycoverag
1 compromised version
- Nov 6, 2024
Malicious code in code-analysis-ts-for-sellercenter (npm)
1 compromised version
- Nov 6, 2024
Malicious code in web3-provdr (npm)
- Nov 6, 2024
Malware in web3-provdr
1 compromised version
- Nov 6, 2024
Malicious code in web-providers (npm)
- Nov 6, 2024
Malware in web-providers
1 compromised version
- Nov 6, 2024
Malicious code in wb-eth3 (npm)
- Nov 6, 2024
Malware in wb-eth3
1 compromised version
- Nov 6, 2024
Malicious code in wb3-eth (npm)
- Nov 6, 2024
Malware in wb3-eth
1 compromised version
- Nov 6, 2024
Malicious code in chat-history-log-viewer (npm)
1 compromised version
- Nov 6, 2024
Malicious code in case-dispute-common (npm)
1 compromised version
- Nov 6, 2024
Malicious code in web-eth (npm)
- Nov 6, 2024
Malware in web-eth
1 compromised version
- Nov 6, 2024
Malicious code in etherscaan-api (npm)
- Nov 6, 2024
Malware in etherscaan-api
1 compromised version
- Nov 6, 2024
Malicious code in ethgass-reporter (npm)
- Nov 6, 2024
Malware in ethgass-reporter
1 compromised version
- Nov 6, 2024
Malicious code in eth-gas-report (npm)
- Nov 6, 2024
Malware in eth-gas-report
1 compromised version
- Nov 6, 2024
Malicious code in gnache-cli (npm)
- Nov 6, 2024
Malware in gnache-cli
1 compromised version
- Nov 6, 2024
Malicious code in ganach-cli (npm)
- Nov 6, 2024
Malware in ganach-cli
1 compromised version
- Nov 6, 2024
Malicious code in babel-plugin-method-version (npm)
1 compromised version
- Nov 6, 2024
Malicious code in trufel (npm)
- Nov 6, 2024
Malware in trufel
1 compromised version
- Nov 6, 2024
Malicious code in puppeteerwweb (npm)
- Nov 6, 2024
Malware in puppeteerwweb
1 compromised version
- Nov 5, 2024
Malicious code in tcms-malicious-package-test (npm)
1 compromised version
Page 6517 of 7,308