Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Aug 1, 2024
Malicious code in boostrapsio (npm)
- Aug 1, 2024
Malicious code in basementio (npm)
- Aug 1, 2024
Malware in boostrapsio
1 compromised version
- Aug 1, 2024
Malware in taiwinders
1 compromised version
- Aug 1, 2024
Malware in trigiated
1 compromised version
- Aug 1, 2024
Malware in modernliner
1 compromised version
- Aug 1, 2024
Malware in strictructor
1 compromised version
- Aug 1, 2024
Malware in basementio
1 compromised version
- Aug 1, 2024
Malware in diosaziose
1 compromised version
- Aug 1, 2024
Malware in cdntodister
1 compromised version
- Aug 1, 2024
Malicious code in persona-tool (npm)
1 compromised version
- Jul 31, 2024
Malicious code in kekepaketti-git (npm)
1 compromised version
- Jul 31, 2024
Malicious code in distube-fast (npm)
1 compromised version
- Jul 31, 2024
Malicious code in miapimanager-fe (npm)
2 compromised versions
- Jul 31, 2024
Malicious code in @illimity/hello-world-cryptonetlabs (npm)
- Jul 31, 2024
Malicious code in @illimity/components (npm)
- Jul 31, 2024
Malicious code in @illimity/commons (npm)
- Jul 31, 2024
Malware in @illimity/hello-world-cryptonetlabs
1 compromised version
- Jul 31, 2024
Malware in @illimity/commons
1 compromised version
- Jul 31, 2024
Malware in @illimity/components
1 compromised version
- Jul 31, 2024
Malicious code in @illimity/rtl-faqs-state (npm)
- Jul 31, 2024
Malicious code in @illimity/core-events (npm)
- Jul 31, 2024
Malicious code in @illimity/core-banking-state (npm)
- Jul 31, 2024
Malware in @illimity/rtl-faqs-state
1 compromised version
- Jul 31, 2024
Malware in @illimity/core-banking-state
1 compromised version
- Jul 31, 2024
Malware in @illimity/core-events
1 compromised version
- Jul 31, 2024
Malicious code in wix-smarts (npm)
- Jul 31, 2024
Malicious code in some-dependency-3 (npm)
- Jul 31, 2024
Malicious code in some-dependency-2 (npm)
- Jul 31, 2024
Malware in some-dependency-2
1 compromised version
- Jul 31, 2024
Malware in wix-smarts
1 compromised version
- Jul 31, 2024
Malware in some-dependency-3
1 compromised version
- Jul 31, 2024
Malware in depe-tool
1 compromised version
- Jul 31, 2024
Malware in wix-smarts-nextjs
1 compromised version
- Jul 31, 2024
Malicious code in toolbox-v2 (npm)
2 compromised versions
- Jul 31, 2024
Malware in toolbox-v2
1 compromised version
- Jul 30, 2024
Malicious code in eslint-plugin-mui-custom (npm)
1 compromised version
- Jul 30, 2024
Malicious code in wix-smarts-nextjs (npm)
1 compromised version
- Jul 30, 2024
Malicious code in psh-hydra-sdk (npm)
2 compromised versions
- Jul 29, 2024
Malicious code in strongkong (PyPI)
1 compromised version
- Jul 29, 2024
Malicious code in kongstrong (PyPI)
1 compromised version
- Jul 29, 2024
Malicious code in solgpt (PyPI)
3 compromised versions
- Jul 29, 2024
Malicious code in lambda-sns-dynatrace-sdk (npm)
5 compromised versions
- Jul 29, 2024
Malicious code in hlwgirl (npm)
1 compromised version
- Jul 29, 2024
Malicious code in depe-tool (npm)
1 compromised version
- Jul 29, 2024
Malicious code in ent-widget-phone (npm)
- Jul 29, 2024
Malware in ent-widget-unauth-msr-stop
1 compromised version
- Jul 29, 2024
Malware in ent-widget-itin
1 compromised version
- Jul 29, 2024
Malware in usaa-message-card
1 compromised version
- Jul 29, 2024
Malware in ent-cas-proxy
1 compromised version
Page 6597 of 7,307