Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,337 total · sorted newest first- Oct 16, 2024
Malicious code in exodusdecoderss (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in exodusdecoders (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in eth-account-api (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in crytic-compilers (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in cryptoaitools (PyPI)
7 compromised versions
- Oct 16, 2024
Malicious code in class-py (PyPI)
1 compromised version
- Oct 16, 2024
Malicious code in cipherbcryptors (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in cipherbcryptor (PyPI)
6 compromised versions
- Oct 16, 2024
Malicious code in calendar-extender (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in bughunter9 (PyPI)
20 compromised versions
- Oct 16, 2024
Malicious code in blypack (PyPI)
5 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoderss (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in atomicdecoders (PyPI)
3 compromised versions
- Oct 16, 2024
Malicious code in artifact-lab-3-package-e90915e1 (PyPI)
2 compromised versions
- Oct 16, 2024
Malicious code in aiogt (PyPI)
4 compromised versions
- Oct 16, 2024
Malicious code in LibEmbedder.Fody (NuGet)
63 compromised versions
- Oct 16, 2024
Malicious code in Blazor.Net (NuGet)
124 compromised versions
- Oct 16, 2024
Malicious code in zxcv1234 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in zworikso (npm)
1 compromised version
- Oct 16, 2024
Malicious code in zwirir (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in zonal-indigo-tahr (npm)
1 compromised version
- Oct 16, 2024
Malicious code in zippy-emerald-bandicoot (npm)
1 compromised version
- Oct 16, 2024
Malicious code in ziodiek (npm)
1 compromised version
- Oct 16, 2024
Malicious code in zierber (npm)
1 compromised version
- Oct 16, 2024
Malicious code in yearning-maroon-raven (npm)
1 compromised version
- Oct 16, 2024
Malicious code in yammering-red-constrictor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in xwuowir (npm)
1 compromised version
- Oct 16, 2024
Malicious code in xwiuowe (npm)
1 compromised version
- Oct 16, 2024
Malicious code in working-chocolate-tahr (npm)
1 compromised version
- Oct 16, 2024
Malicious code in womens-health-vis (npm)
1 compromised version
- Oct 16, 2024
Malicious code in win32-arm64 (npm)
1 compromised version
- Oct 16, 2024
Malicious code in weirueod (npm)
1 compromised version
- Oct 16, 2024
Malicious code in websites-assets (npm)
5 compromised versions
- Oct 16, 2024
Malicious code in website-next (npm)
1 compromised version
- Oct 16, 2024
Malicious code in wbtvd-screeners-web (npm)
1 compromised version
- Oct 16, 2024
Malicious code in vwirow (npm)
1 compromised version
- Oct 16, 2024
Malicious code in vskiwe (npm)
1 compromised version
- Oct 16, 2024
Malicious code in vsieor (npm)
1 compromised version
- Oct 16, 2024
Malicious code in vortexter (npm)
1 compromised version
- Oct 16, 2024
Malicious code in viwoeise (npm)
1 compromised version
- Oct 16, 2024
Malicious code in visual-aqua-amphibian (npm)
1 compromised version
- Oct 16, 2024
Malicious code in viona-atm (npm)
1 compromised version
- Oct 16, 2024
Malicious code in vio-atm (npm)
10 compromised versions
- Oct 16, 2024
Malicious code in vendiror (npm)
1 compromised version
- Oct 16, 2024
Malicious code in uwioer (npm)
1 compromised version
- Oct 16, 2024
Malicious code in uuiidv2 (npm)
2 compromised versions
- Oct 16, 2024
Malicious code in utils.logger (npm)
1 compromised version
- Oct 16, 2024
Malicious code in utils-define-nonenumerable-read-only-property (npm)
1 compromised version
- Oct 16, 2024
Malicious code in util-waiter (npm)
1 compromised version
- Oct 16, 2024
Malicious code in util-stream (npm)
1 compromised version
Page 6529 of 7,307