Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Aug 6, 2024
Malicious code in @taxify/city-borders (npm)
3 compromised versions
- Aug 6, 2024
Malicious code in @taxify/trippricing (npm)
3 compromised versions
- Aug 6, 2024
Malicious code in @taxify/eslint-config-react-native (npm)
5 compromised versions
- Aug 6, 2024
Malicious code in @taxify/smartpickups (npm)
4 compromised versions
- Aug 6, 2024
Malicious code in theme-bahrain-nb-hdddc3 (npm)
1 compromised version
- Aug 6, 2024
Malicious code in @bingads-webui-react/with-site-map (npm)
- Aug 6, 2024
Malicious code in @bingads-webui-react/primitive-utilities (npm)
- Aug 6, 2024
Malware in @bingads-webui-react/with-site-map
1 compromised version
- Aug 6, 2024
Malware in @bingads-webui-react/primitive-utilities
1 compromised version
- Aug 5, 2024
Malicious code in gandon-pidar1 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in whel (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in whee11 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in s3ffs (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in fsspecc (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in crypt0graphyy (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in paquete-5 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in advdef01 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit3 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit2 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in mecit1 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in reqests-2 (PyPI)
1 compromised version
- Aug 5, 2024
Malicious code in lit-3 (npm)
2 compromised versions
- Aug 5, 2024
Malicious code in broadcast-podlet (npm)
1 compromised version
- Aug 5, 2024
Malicious code in nvmfix (npm)
1 compromised version
- Aug 5, 2024
Malicious code in httpsearch (npm)
2 compromised versions
- Aug 5, 2024
Malicious code in dea-hallow (npm)
- Aug 5, 2024
Malware in dea-hallow
1 compromised version
- Aug 5, 2024
Malicious code in prmnmd-tuls (npm)
- Aug 5, 2024
Malicious code in permenmd-wifi (npm)
- Aug 5, 2024
Malicious code in permenmd-vps (npm)
- Aug 5, 2024
Malicious code in permenmd-track (npm)
- Aug 5, 2024
Malicious code in permenmd-flood (npm)
- Aug 5, 2024
Malware in permenmd-track
1 compromised version
- Aug 5, 2024
Malware in prmnmd-tuls
1 compromised version
- Aug 5, 2024
Malware in permenmd-wifi
1 compromised version
- Aug 5, 2024
Malware in permenmd-vps
1 compromised version
- Aug 5, 2024
Malware in permenmd-flood
1 compromised version
- Aug 1, 2024
Malicious code in md-progress-circular (npm)
6 compromised versions
- Aug 1, 2024
Malicious code in @adidas-data-mesh/common-aws (npm)
2 compromised versions
- Aug 1, 2024
Malicious code in safebs58.js (npm)
1 compromised version
- Aug 1, 2024
Malicious code in nodebs58 (npm)
2 compromised versions
- Aug 1, 2024
Malicious code in ndoe-fethc (npm)
1 compromised version
- Aug 1, 2024
Malicious code in layout-utils.js (npm)
1 compromised version
- Aug 1, 2024
Malicious code in kekepaketti-og (npm)
1 compromised version
- Aug 1, 2024
Malicious code in trigiated (npm)
- Aug 1, 2024
Malicious code in taiwinders (npm)
- Aug 1, 2024
Malicious code in strictructor (npm)
- Aug 1, 2024
Malicious code in modernliner (npm)
- Aug 1, 2024
Malicious code in diosaziose (npm)
- Aug 1, 2024
Malicious code in cdntodister (npm)
Page 6596 of 7,307