Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Nov 5, 2024
Malicious code in nerst (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in nurst (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in nuerst (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in baibitmf (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in bebitmf (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in babetmf (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in x2vml-gml (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in v2mlx-gml (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in v2xlm-gml (PyPI)
1 compromised version
- Nov 5, 2024
Malicious code in lightsequ (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in lightseqe (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in bytekafka-0-0-15 (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in bytekafka-0-15 (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in bytekafka (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in lightseeq (PyPI)
2 compromised versions
- Nov 5, 2024
Malicious code in chameleon-sdk-android (npm)
1 compromised version
- Nov 5, 2024
Malicious code in cml-tt-sets (npm)
1 compromised version
- Nov 5, 2024
Malicious code in semi-d2c (npm)
1 compromised version
- Nov 5, 2024
Malicious code in cml-cloudbase (npm)
1 compromised version
- Nov 5, 2024
Malicious code in semi-design (npm)
1 compromised version
- Nov 5, 2024
Malicious code in @douinfe/semi-ui (npm)
1 compromised version
- Nov 4, 2024
Malicious code in nuclei-action (npm)
2 compromised versions
- Nov 4, 2024
Malicious code in nodepaysafesdk (npm)
4 compromised versions
- Nov 4, 2024
Malicious code in mixpanelexpo (npm)
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-captre (npm)
- Nov 4, 2024
Malware in puppeteer-captre
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-html2pd (npm)
- Nov 4, 2024
Malware in puppeteer-html2pd
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-firfox (npm)
- Nov 4, 2024
Malware in puppeteer-firfox
1 compromised version
- Nov 4, 2024
Malicious code in puppeteercaptur (npm)
- Nov 4, 2024
Malware in puppeteercaptur
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-autoscroll (npm)
- Nov 4, 2024
Malware in puppeteer-autoscroll
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-req-interceptor (npm)
- Nov 4, 2024
Malware in puppeteer-req-interceptor
1 compromised version
- Nov 4, 2024
Malicious code in puppeteer-screencorder (npm)
- Nov 4, 2024
Malware in puppeteer-screencorder
1 compromised version
- Nov 4, 2024
Malicious code in pupeteeerproxy (npm)
- Nov 4, 2024
Malware in pupeteeerproxy
1 compromised version
- Nov 4, 2024
Malicious code in pupeteer-proxy (npm)
- Nov 4, 2024
Malware in pupeteer-proxy
1 compromised version
- Nov 4, 2024
Malicious code in pupeteer-record (npm)
- Nov 4, 2024
Malware in pupeteer-record
1 compromised version
- Nov 4, 2024
Malicious code in puppeteerrecordr (npm)
- Nov 4, 2024
Malware in puppeteerrecordr
1 compromised version
- Nov 4, 2024
Malicious code in pupeteer-extra-plugin-adblocker (npm)
- Nov 4, 2024
Malware in pupeteer-extra-plugin-adblocker
1 compromised version
- Nov 4, 2024
Malicious code in pupeteerextra (npm)
- Nov 4, 2024
Malware in pupeteerextra
1 compromised version
Page 6519 of 7,308