Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jul 4, 2024
Malware in @zitterorg/magnam-doloribus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/voluptates-reprehenderit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/repudiandae-quidem
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/accusamus-numquam
1 compromised version
- Jul 3, 2024
Malicious code in addcriteria (npm)
1 compromised version
- Jul 3, 2024
Malicious code in parser-7.0.0 (npm)
5 compromised versions
- Jul 3, 2024
Malicious code in spl-types (PyPI)
4 compromised versions
- Jul 3, 2024
Malicious code in sol-instruct (PyPI)
1 compromised version
- Jul 3, 2024
Malicious code in raydium-sdk (PyPI)
2 compromised versions
- Jul 3, 2024
Malicious code in raydium (PyPI)
4 compromised versions
- Jul 3, 2024
Malicious code in sol-structs (PyPI)
2 compromised versions
- Jul 3, 2024
Malicious code in python-guild (PyPI)
1 compromised version
- Jul 3, 2024
Malicious code in cli-pkg-test (npm)
5 compromised versions
- Jul 3, 2024
Malware in test-pkg-blabla
1 compromised version
- Jul 3, 2024
Malicious code in render-sample-app (npm)
- Jul 3, 2024
Malicious code in auth0-dashboard-widget (npm)
- Jul 3, 2024
Malicious code in auth0-authz-extension (npm)
- Jul 3, 2024
Malware in auth0-authz-extension
1 compromised version
- Jul 3, 2024
Malware in auth0-dashboard-widget
1 compromised version
- Jul 3, 2024
Malware in render-sample-app
1 compromised version
- Jul 3, 2024
Malware in auth0-mailchimp-export
1 compromised version
- Jul 3, 2024
Malicious code in cra-docs (npm)
1 compromised version
- Jul 3, 2024
Malware in kiln-desktop
1 compromised version
- Jul 3, 2024
Malware in bageth
1 compromised version
- Jul 3, 2024
Malware in bluefin-exchange-contracts-evm
1 compromised version
- Jul 3, 2024
Malware in iobeya-time-utils
1 compromised version
- Jul 3, 2024
Malicious code in msa-common (npm)
4 compromised versions
- Jul 3, 2024
Malware in msa-common
1 compromised version
- Jul 3, 2024
Malicious code in demo-51200 (npm)
1 compromised version
- Jul 2, 2024
Malicious code in bluefin-exchange-contracts-evm (npm)
1 compromised version
- Jul 2, 2024
Malicious code in orderly-omnichain-occ (npm)
1 compromised version
- Jul 2, 2024
Malware in orderly-omnichain-occ
1 compromised version
- Jul 1, 2024
Malicious code in text-adventure-game (PyPI)
4 compromised versions
- Jul 1, 2024
Malicious code in prpc-client-instance.js (npm)
1 compromised version
- Jul 1, 2024
Malicious code in puredocx (npm)
- Jul 1, 2024
Malware in puredocx
1 compromised version
- Jul 1, 2024
Malware in @wdp-gov/catalog-serialization-engine
1 compromised version
- Jul 1, 2024
Malware in @wdp-gov/lineage-component
1 compromised version
- Jul 1, 2024
Malicious code in djs14-checker (npm)
1 compromised version
- Jul 1, 2024
Malware in djs14-checker
1 compromised version
- Jul 1, 2024
Malicious code in viona-atm-payment (npm)
9 compromised versions
- Jul 1, 2024
Malicious code in vio-captcha (npm)
- Jul 1, 2024
Malicious code in check-credit (npm)
- Jul 1, 2024
Malware in check-credit
1 compromised version
- Jul 1, 2024
Malware in vio-captcha
1 compromised version
- Jul 1, 2024
Malware in viona-atm-payment
1 compromised version
- Jul 1, 2024
Malicious code in blue-oval-theme (npm)
1 compromised version
- Jun 30, 2024
Malicious code in auth0-mailchimp-export (npm)
1 compromised version
- Jun 29, 2024
Malicious code in zlibxjson (PyPI)
2 compromised versions
- Jun 29, 2024
Malicious code in iobeya-time-utils (npm)
1 compromised version
Page 6612 of 7,293