Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Oct 5, 2024
Malicious code in lending-vault (npm)
1 compromised version
- Oct 5, 2024
Malicious code in app-monorepo (npm)
1 compromised version
- Oct 5, 2024
Malicious code in discord-api-docs (npm)
1 compromised version
- Oct 5, 2024
Malicious code in bolteu (npm)
3 compromised versions
- Oct 4, 2024
Malicious code in vention-quest (npm)
1 compromised version
- Oct 4, 2024
Malicious code in hulululu (npm)
1 compromised version
- Oct 4, 2024
Malicious code in hilla-components-dependencies (npm)
1 compromised version
- Oct 4, 2024
Malicious code in vue-assignment (npm)
1 compromised version
- Oct 4, 2024
Malicious code in reference-implementation (npm)
1 compromised version
- Oct 4, 2024
Malicious code in @test3.svt/first-npm-package-test-2 (npm)
13 compromised versions
- Oct 4, 2024
Malicious code in @linx-ui/pharmacy (npm)
1 compromised version
- Oct 4, 2024
Malicious code in @linx-ui/shared (npm)
1 compromised version
- Oct 4, 2024
Malicious code in @linx-ui/admin (npm)
1 compromised version
- Oct 3, 2024
Malicious code in deferred-initialization (npm)
1 compromised version
- Oct 3, 2024
Malicious code in hotels-widget (npm)
1 compromised version
- Oct 3, 2024
Malicious code in upllib (PyPI)
2 compromised versions
- Oct 3, 2024
Malicious code in pyutiltool (PyPI)
1 compromised version
- Oct 3, 2024
Malicious code in exflibrary (PyPI)
4 compromised versions
- Oct 3, 2024
Malicious code in dlibex (PyPI)
2 compromised versions
- Oct 3, 2024
Malicious code in should_be_whitelisted.js (npm)
1 compromised version
- Oct 3, 2024
Malicious code in vizplotlib (PyPI)
1 compromised version
- Oct 3, 2024
Malicious code in viplotlib (PyPI)
2 compromised versions
- Oct 3, 2024
Malicious code in alfooou (PyPI)
4 compromised versions
- Oct 3, 2024
Malicious code in @test3.svt/first-npm-package-test (npm)
6 compromised versions
- Oct 3, 2024
Malicious code in kupo-app-secure-store-plugin (npm)
1 compromised version
- Oct 3, 2024
Malicious code in interactive-app (npm)
1 compromised version
- Oct 3, 2024
Malicious code in aou-ui (npm)
2 compromised versions
- Oct 3, 2024
Malicious code in kupo-capacitor-statusbar-safe-area (npm)
1 compromised version
- Oct 2, 2024
Malicious code in speech-to-speech-demo (npm)
1 compromised version
- Oct 2, 2024
Malicious code in electron-release-clerk (npm)
1 compromised version
- Oct 2, 2024
Zenario allows authenticated admin users to upload PDF files containing malicious code
1 compromised version
- Oct 2, 2024
Malicious code in com.lootlocker.lootlockersdk (npm)
1 compromised version
- Oct 2, 2024
Malicious code in ember-deep-addon (npm)
1 compromised version
- Oct 2, 2024
Malicious code in spy-ai (PyPI)
9 compromised versions
- Oct 2, 2024
Malicious code in spiderai (PyPI)
6 compromised versions
- Oct 2, 2024
Malicious code in spiderxr-ai (PyPI)
3 compromised versions
- Oct 2, 2024
Malicious code in spider-ai (PyPI)
6 compromised versions
- Oct 2, 2024
Malicious code in @b2bneo/components-tabs (npm)
1 compromised version
- Oct 2, 2024
Malware in verida-tech-demos
1 compromised version
- Oct 2, 2024
Malware in site-national-covoiturage
1 compromised version
- Oct 2, 2024
Malicious code in dsp_login_front (npm)
1 compromised version
- Oct 2, 2024
Malware in dsp_login_front
1 compromised version
- Oct 2, 2024
Malicious code in express-core-cache (npm)
- Oct 2, 2024
Malware in express-core-cache
1 compromised version
- Oct 2, 2024
Malicious code in cookie_info (npm)
- Oct 2, 2024
Malware in cookie_info
1 compromised version
- Oct 2, 2024
Malicious code in osint-tool (PyPI)
4 compromised versions
- Oct 2, 2024
Malicious code in discord-token-lib (PyPI)
1 compromised version
- Oct 2, 2024
Malicious code in titan-osint (PyPI)
2 compromised versions
- Oct 2, 2024
Malicious code in verida-tech-demos (npm)
1 compromised version
Page 6547 of 7,307