Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Aug 10, 2024
Malicious code in artifact-lab-3-package-392c6acd (PyPI)
24 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-f0727516 (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-f70fc6dd (PyPI)
2 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-e7ffd2ef (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-e46d5661 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-d7d52d45 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-b9485a2f (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-77d0c154 (PyPI)
3 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-438d82fc (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-3ccf47e8 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-34b21b63 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-2387cbf7 (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-2387a34d (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-1f7a39bc (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-1b4d0db5 (PyPI)
5 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-153c1c1a (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in artifact-lab-3-package-f9dafccc (PyPI)
3 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI)
6 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-736f752d (PyPI)
4 compromised versions
- Aug 10, 2024
Malicious code in artifact-lab-3-package-02f73e0e (PyPI)
6 compromised versions
- Aug 10, 2024
Malicious code in jupsolhelp (PyPI)
4 compromised versions
- Aug 10, 2024
Malicious code in jupphelp (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in jupihelp (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in juphelper (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in juphelp (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in jupiterhelper (PyPI)
4 compromised versions
- Aug 10, 2024
Malicious code in jupiter-helper (PyPI)
1 compromised version
- Aug 10, 2024
Malicious code in radioplayer (npm)
1 compromised version
- Aug 10, 2024
Malicious code in aiohttp-libscss (PyPI)
6 compromised versions
- Aug 9, 2024
Malicious code in ethercheck (PyPI)
2 compromised versions
- Aug 9, 2024
Malicious code in postman-open-technologies-knowledge-base-api (npm)
1 compromised version
- Aug 9, 2024
Malicious code in benasin_logger (npm)
1 compromised version
- Aug 9, 2024
Malware in @adidas-data-mesh/consumer-journey
1 compromised version
- Aug 9, 2024
Malware in @adidas-data-mesh/common
1 compromised version
- Aug 9, 2024
Malware in @adidas-data-mesh/common-aws
1 compromised version
- Aug 9, 2024
Malicious code in @avaldigitallabs/adl-pfm-lib-web-components (npm)
- Aug 9, 2024
Malware in @avaldigitallabs/adl-pfm-lib-web-components
1 compromised version
- Aug 8, 2024
Malicious code in internal-corp (npm)
1 compromised version
- Aug 7, 2024
Malicious code in syf-js-utilities (npm)
- Aug 7, 2024
Malicious code in mma-mfe (npm)
- Aug 7, 2024
Malicious code in iva-react-web-ui (npm)
- Aug 7, 2024
Malicious code in incisive_testing_stufff (npm)
- Aug 7, 2024
Malicious code in desttest (npm)
- Aug 7, 2024
Malicious code in click-action-framework (npm)
- Aug 7, 2024
Malware in syf-js-utilities
1 compromised version
- Aug 7, 2024
Malware in desttest
1 compromised version
- Aug 7, 2024
Malware in click-action-framework
1 compromised version
- Aug 7, 2024
Malware in incisive_testing_stufff
1 compromised version
- Aug 7, 2024
Malware in mma-mfe
1 compromised version
Page 6591 of 7,307