Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,620 total · sorted newest first- Jun 5, 2024
Malware in com.unity.cloud.gltfast
1 compromised version
- Jun 5, 2024
Malicious code in e2e-frontend (npm)
1 compromised version
- Jun 5, 2024
Malicious code in ewf-mfe (npm)
1 compromised version
- Jun 5, 2024
Malicious code in fccui (npm)
2 compromised versions
- Jun 4, 2024
Malicious code in client-onboarding (npm)
1 compromised version
- Jun 4, 2024
Malicious code in cpr-mfe (npm)
1 compromised version
- Jun 4, 2024
Malicious code in glup-debugger-log (npm)
- Jun 4, 2024
Malware in glup-debugger-log
1 compromised version
- Jun 4, 2024
Malicious code in h5guard (npm)
1 compromised version
- Jun 3, 2024
Malicious code in winextracter (npm)
- Jun 3, 2024
Malicious code in win66lib (npm)
- Jun 3, 2024
Malicious code in testone-avisheknayal (npm)
- Jun 3, 2024
Malicious code in test-lib-avishek (npm)
- Jun 3, 2024
Malicious code in random-avishek (npm)
- Jun 3, 2024
Malware in win66lib
1 compromised version
- Jun 3, 2024
Malware in test-lib-avishek
1 compromised version
- Jun 3, 2024
Malware in winextracter
1 compromised version
- Jun 3, 2024
Malware in testone-avisheknayal
1 compromised version
- Jun 3, 2024
Malware in random-avishek
1 compromised version
- Jun 3, 2024
Malicious code in pkg-lumina-test (npm)
- Jun 3, 2024
Malicious code in package-delete (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal122 (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal1 (npm)
- Jun 3, 2024
Malicious code in npmnewtest-avisheknayal (npm)
- Jun 3, 2024
Malicious code in developer-integrity2 (npm)
- Jun 3, 2024
Malicious code in developer-integrity1 (npm)
- Jun 3, 2024
Malware in developer-integrity2
1 compromised version
- Jun 3, 2024
Malware in developer-integrity1
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal1
1 compromised version
- Jun 3, 2024
Malware in npmnewtest-avisheknayal122
1 compromised version
- Jun 3, 2024
Malware in package-delete
1 compromised version
- Jun 3, 2024
Malware in pkg-lumina-test
1 compromised version
- Jun 3, 2024
Malicious code in developer-integrity-avishek (npm)
- Jun 3, 2024
Malicious code in demotestsomple (npm)
- Jun 3, 2024
Malicious code in demotestsample (npm)
- Jun 3, 2024
Malicious code in demo-sridharrr (npm)
- Jun 3, 2024
Malicious code in demo-sridhar.com (npm)
- Jun 3, 2024
Malicious code in dematestsample (npm)
- Jun 3, 2024
Malware in demo-sridharrr
1 compromised version
- Jun 3, 2024
Malware in developer-integrity-avishek
1 compromised version
- Jun 3, 2024
Malware in demo-sridhar.com
1 compromised version
- Jun 3, 2024
Malware in demotestsomple
1 compromised version
- Jun 3, 2024
Malware in demotestsample
1 compromised version
- Jun 3, 2024
Malware in dematestsample
1 compromised version
- Jun 3, 2024
Malicious code in command-injection-avi (npm)
- Jun 3, 2024
Malicious code in calculator-avishek (npm)
- Jun 3, 2024
Malicious code in @juiggitea/voluptates-illum-consequatur (npm)
- Jun 3, 2024
Malicious code in @juiggitea/voluptatem-quos-blanditiis (npm)
- Jun 3, 2024
Malicious code in @juiggitea/vero-placeat-ea-consequuntur (npm)
Page 6729 of 7,293