Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Aug 26, 2024
Malware in @live-backstage/client
1 compromised version
- Aug 26, 2024
Malware in radioplayer
1 compromised version
- Aug 26, 2024
Malware in twentytwentyone
1 compromised version
- Aug 26, 2024
Malicious code in solana-cctp-contracts (npm)
1 compromised version
- Aug 26, 2024
Malware in solana-cctp-contracts
1 compromised version
- Aug 26, 2024
Malicious code in system-library-gameanalytics-slotanalytics (npm)
- Aug 26, 2024
Malicious code in system-library-gameanalytics-common (npm)
- Aug 26, 2024
Malicious code in system-library-gameanalytics-client (npm)
- Aug 26, 2024
Malicious code in platform-client-messaging-service (npm)
- Aug 26, 2024
Malicious code in @benasin_2/frontend-logger (npm)
- Aug 26, 2024
Malware in system-library-gameanalytics-common
1 compromised version
- Aug 26, 2024
Malware in system-library-gameanalytics-client
1 compromised version
- Aug 26, 2024
Malware in platform-client-messaging-service
1 compromised version
- Aug 26, 2024
Malware in system-library-gameanalytics-slotanalytics
1 compromised version
- Aug 26, 2024
Malware in @benasin_2/frontend-logger
1 compromised version
- Aug 26, 2024
Malware in cchome-shared
1 compromised version
- Aug 26, 2024
Malicious code in @pampa-ui/pill (npm)
- Aug 26, 2024
Malware in @pampa-ui/pill
1 compromised version
- Aug 23, 2024
Malicious code in swapoc (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in requestss3 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requestss2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in requests1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pytc123 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hackmiami (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in soultracker (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-346234293 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in package-name-here (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg2 (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in evil-pkg1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in evil-pkg (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in ninjainjtest1337 (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in wehaveatogether (PyPI)
6 compromised versions
- Aug 23, 2024
Malicious code in test-tool-devdevrl-hackerone (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in shiva-rao23 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in python-project-wntliogu (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in popeye-shyam-love (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in pitest117 (PyPI)
12 compromised versions
- Aug 23, 2024
Malicious code in pitest115 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in lobomarinopython (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in ibmodules (PyPI)
3 compromised versions
- Aug 23, 2024
Malicious code in honestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hhonestjson (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hello-bozzo2 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in hack-test (PyPI)
2 compromised versions
- Aug 23, 2024
Malicious code in gltest (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-time-zzs (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in get-root (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in expkg-am (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in example-pypi-package-loler1 (PyPI)
1 compromised version
- Aug 23, 2024
Malicious code in easyioctl (PyPI)
5 compromised versions
Page 6589 of 7,307