Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 28, 2024
Malicious code in etheruum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherun (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherumm (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheruim (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheruemm (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etheruem (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherriuumm (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherriuum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherrium (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherreumm (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherreum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in etherreeum (PyPI)
1 compromised version
- Jun 28, 2024
Malicious code in @yu-life/yulife-bdd-framework (npm)
1 compromised version
- Jun 28, 2024
Malicious code in @yu-life/react-native-yu-watch (npm)
1 compromised version
- Jun 28, 2024
Malicious code in @rfv/modules (npm)
1 compromised version
- Jun 28, 2024
Malware in @rfv/modules
1 compromised version
- Jun 28, 2024
Malicious code in @freetime/core-utils (npm)
- Jun 28, 2024
Malware in @freetime/core-utils
1 compromised version
- Jun 28, 2024
Malicious code in colors-names (npm)
- Jun 28, 2024
Malware in colors-names
1 compromised version
- Jun 28, 2024
Malicious code in cssyx (npm)
- Jun 28, 2024
Malicious code in ajexx (npm)
1 compromised version
- Jun 28, 2024
Malware in cssyx
1 compromised version
- Jun 28, 2024
Malware in ajexx
1 compromised version
- Jun 28, 2024
Malicious code in lnx-integrity-check-prop (npm)
1 compromised version
- Jun 28, 2024
Malware in lnx-integrity-check-prop
1 compromised version
- Jun 28, 2024
Malicious code in sol-web3-1.45 (npm)
4 compromised versions
- Jun 28, 2024
Malware in sol-web3-1.45
1 compromised version
- Jun 27, 2024
Malicious code in @cloee/fetchs (npm)
5 compromised versions
- Jun 27, 2024
Malware in @cloee/fetchs
1 compromised version
- Jun 27, 2024
Malicious code in world-id-onchain-starter (npm)
4 compromised versions
- Jun 27, 2024
Malicious code in near-linkdrop-contract (npm)
- Jun 27, 2024
Malicious code in mwp-localtunnel-client (npm)
5 compromised versions
- Jun 27, 2024
Malware in near-linkdrop-contract
1 compromised version
- Jun 27, 2024
Malware in govgen-governance
1 compromised version
- Jun 27, 2024
Malware in world-id-onchain-starter
1 compromised version
- Jun 27, 2024
Malware in mwp-localtunnel-client
1 compromised version
- Jun 27, 2024
Malware in stablecoin-evm
1 compromised version
- Jun 27, 2024
Malicious code in gradient-tiny (npm)
- Jun 27, 2024
Malicious code in colors-flag (npm)
- Jun 27, 2024
Malware in colors-flag
1 compromised version
- Jun 27, 2024
Malware in gradient-tiny
1 compromised version
- Jun 26, 2024
Malicious code in @wdp-gov/catalog-serialization-engine (npm)
9 compromised versions
- Jun 26, 2024
Malicious code in @wdp-gov/lineage-component (npm)
11 compromised versions
- Jun 26, 2024
Malware in trip-component-platform-online-region-selector
1 compromised version
- Jun 26, 2024
Malware in trip-component-platform-online-subscribe-checkbox
1 compromised version
- Jun 26, 2024
Malicious code in elitebots-prevnames-discord (npm)
6 compromised versions
- Jun 26, 2024
Malicious code in elitebots-prevnames (npm)
- Jun 26, 2024
Malware in elitebots-prevnames-discord
1 compromised version
Page 6616 of 7,293