Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,429 total · sorted newest first- May 9, 2023
Malware in omron_cx_supervisor_v3_1_rar_xvak
1 compromised version
- May 9, 2023
Malware in instant_verb_tables_roxanne_burns_pdf___hot___uy4
1 compromised version
- May 9, 2023
Malware in new_cracker_element_3d_after_effect_cs6_new_crack_dzr
1 compromised version
- May 9, 2023
Malware in der_zahlenteufel_enzensberger_pdf_free_hot__760
1 compromised version
- May 9, 2023
Malware in sejarah_dunia_kuno_pdf_45_rwrnu
1 compromised version
- May 9, 2023
Malware in sdc40_yamatake_manual_gi
1 compromised version
- May 9, 2023
Malware in milica_jakovljevic_mala_supruga_pdf__verified___flo
1 compromised version
- May 9, 2023
Malware in insidious_chapter_2_free_in_hindi_full__hd
1 compromised version
- May 9, 2023
Malware in 04xi_mfz
1 compromised version
- May 9, 2023
Malware in kitab_ta_lim_muta_alim_pdf_link__4i
1 compromised version
- May 9, 2023
Malware in hpsmartstreamforindesigncccrack_7kh
1 compromised version
- May 9, 2023
Malicious code in animoto_full_version_portable_crack_rt (npm)
- May 9, 2023
Malware in animoto_full_version_portable_crack_rt
1 compromised version
- May 8, 2023
Malicious code in mesbah-unclaim (npm)
3 compromised versions
- May 8, 2023
Malicious code in com.unity.test-runner-manual-tests (npm)
1 compromised version
- May 8, 2023
Malicious code in com.unity.xrtools.spatial-hash (npm)
1 compromised version
- May 8, 2023
Malicious code in a2b_hex (npm)
1 compromised version
- May 8, 2023
Malicious code in discord-spammer-webhooks (npm)
- May 8, 2023
Malicious code in selfpyintpaypal (PyPI)
- May 8, 2023
Malicious code in selfcontrolloadload (PyPI)
- May 7, 2023
Malicious code in py-intellibint (PyPI)
- May 7, 2023
Malicious code in esqgameencodereplace (PyPI)
- May 7, 2023
Malicious code in libpipultravirtual (PyPI)
- May 5, 2023
Malicious code in pmcrypto-v7 (npm)
1 compromised version
- May 5, 2023
Malicious code in pmcrypto-v7-test (npm)
1 compromised version
- May 5, 2023
Malicious code in serverless-action (npm)
1 compromised version
- May 5, 2023
Malicious code in suncorp-styleguide-react-components (npm)
4 compromised versions
- May 5, 2023
Malicious code in sagemakertransformers (PyPI)
1 compromised version
- May 5, 2023
Malicious code in back-alley (npm)
1 compromised version
- May 5, 2023
Malicious code in confusedatma (npm)
3 compromised versions
- May 5, 2023
Malicious code in font-forno (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-dlb (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-ui-framework (npm)
1 compromised version
- May 4, 2023
Malicious code in santander-portal-node-library (npm)
1 compromised version
- May 4, 2023
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)
1 compromised version
- May 4, 2023
Malicious code in bitshares-ui-style-guide (npm)
1 compromised version
- May 4, 2023
Malicious code in postaggingcorenlp (npm)
1 compromised version
- May 4, 2023
Malicious code in idcs-dialog (npm)
2 compromised versions
- May 4, 2023
Malicious code in music-pro (npm)
- May 4, 2023
Malware in music-pro
1 compromised version
- May 4, 2023
Malicious code in modified_bayes (RubyGems)
2 compromised versions
- May 4, 2023
Malicious code in nemocloud (npm)
1 compromised version
- May 4, 2023
Malicious code in ban-notifier4 (npm)
1 compromised version
- May 4, 2023
Malicious code in microsoft_kiota_http (RubyGems)
1 compromised version
- May 3, 2023
Malicious code in kobi--front-helpers (npm)
3 compromised versions
- May 3, 2023
Malicious code in libtpu-nightly (PyPI)
1 compromised version
- May 3, 2023
Malicious code in not-a-real-project (npm)
1 compromised version
- May 3, 2023
Malicious code in not-a-real-dep (npm)
1 compromised version
- May 3, 2023
Malicious code in api-code-capture-chrome-extension (npm)
1 compromised version
- May 3, 2023
Malicious code in afterpay-sdk-example-server (npm)
3 compromised versions
Page 6841 of 7,289