Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Jul 27, 2024
Malicious code in prnigtest (RubyGems)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-ssn (npm)
1 compromised version
- Jul 27, 2024
Malicious code in usaa-modal (npm)
1 compromised version
- Jul 27, 2024
Malicious code in usaa-message-card (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-cas-proxy (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-disclosure-mocks (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-unauth-msr-stop (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-file-upload-widget (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-military (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-occupation (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-gender (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-itin (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-addcap (npm)
1 compromised version
- Jul 27, 2024
Malicious code in ent-widget-address (npm)
1 compromised version
- Jul 27, 2024
Malicious code in sendapp (npm)
1 compromised version
- Jul 27, 2024
Malicious code in testaloni-jarneese (npm)
1 compromised version
- Jul 26, 2024
Malicious code in qassabi (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-4 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in private-test-1 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in mkdsli (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in masirkhan (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in jamasp (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in goftvagoo (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dexat2 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dependency908 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in dependency133434fr43437 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in confirmedbywaseem (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in your-module-name (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in testpysecure (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in shiva123456 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in sensadway (PyPI)
5 compromised versions
- Jul 26, 2024
Malicious code in rwimodeling (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in piprce (PyPI)
43 compromised versions
- Jul 26, 2024
Malicious code in murkh1111 (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in libspatialindex (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in jd-mlops (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in is-number-object (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in interasdasdnal-data-parser (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in greensadway (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in graphemer (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in google-appengine-ext (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in globrex (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in elbloadmonitor (PyPI)
2 compromised versions
- Jul 26, 2024
Malicious code in cloudx-base (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in cloudx-auth (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in alksdjpureranser (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in 0x000testqwe (PyPI)
1 compromised version
- Jul 26, 2024
Malicious code in saml-helper (PyPI)
3 compromised versions
- Jul 26, 2024
Malicious code in rapyd-logger (PyPI)
1 compromised version
Page 6599 of 7,307