Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- May 10, 2023
Malicious code in spamsynonym (PyPI)
2 compromised versions
- May 10, 2023
Malicious code in iiris-new2 (PyPI)
1 compromised version
- May 10, 2023
Malicious code in confuseddeps (npm)
1 compromised version
- May 10, 2023
Malicious code in stripe-deep-dup-tree (npm)
2 compromised versions
- May 10, 2023
Malicious code in stripe-deep-deep (npm)
1 compromised version
- May 9, 2023
Malicious code in iiris-new (PyPI)
1 compromised version
- May 9, 2023
Malicious code in mandrill-api-ruby (RubyGems)
1 compromised version
- May 9, 2023
Malicious code in test-test-test-leys-check (PyPI)
1 compromised version
- May 9, 2023
Malicious code in pwa-mmt-ui-header (npm)
1 compromised version
- May 9, 2023
Malicious code in com.google.devtools.atsconsole.controller.proto (npm)
- May 9, 2023
Malware in com.google.devtools.atsconsole.controller.proto
1 compromised version
- May 9, 2023
Malware in pwa-mmt-ui-header
1 compromised version
- May 9, 2023
Malicious code in viihdeonline-shared-components (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-mithril-utils (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-mithril-packages (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-form-helper (npm)
8 compromised versions
- May 9, 2023
Malicious code in oj-cropper (npm)
8 compromised versions
- May 9, 2023
Malicious code in mv-browser-support (npm)
- May 9, 2023
Malicious code in mapi-js (npm)
- May 9, 2023
Malicious code in dojo-common (npm)
8 compromised versions
- May 9, 2023
Malware in mv-browser-support
1 compromised version
- May 9, 2023
Malware in oj-mithril-utils
1 compromised version
- May 9, 2023
Malware in oj-mithril-packages
1 compromised version
- May 9, 2023
Malware in oj-form-helper
1 compromised version
- May 9, 2023
Malware in viihdeonline-shared-components
1 compromised version
- May 9, 2023
Malware in mapi-js
1 compromised version
- May 9, 2023
Malware in oj-cropper
1 compromised version
- May 9, 2023
Malware in dojo-common
1 compromised version
- May 9, 2023
Malicious code in discord-sp (npm)
- May 9, 2023
Malware in discord-sp
1 compromised version
- May 9, 2023
Malicious code in foofoo (npm)
- May 9, 2023
Malware in foofoo
1 compromised version
- May 9, 2023
Malicious code in jannah-client (npm)
- May 9, 2023
Malware in jannah-client
1 compromised version
- May 9, 2023
Malicious code in burningskyme (npm)
- May 9, 2023
Malware in burningskyme
1 compromised version
- May 9, 2023
Malicious code in experimental-entrevista-react-01 (npm)
- May 9, 2023
Malware in serverless-action
1 compromised version
- May 9, 2023
Malware in experimental-entrevista-react-01
1 compromised version
- May 9, 2023
Malware in pcorbr-ui-framework
1 compromised version
- May 9, 2023
Malware in santander-portal-node-library
1 compromised version
- May 9, 2023
Malware in pcorbr-dlb
1 compromised version
- May 9, 2023
Malware in font-forno
1 compromised version
- May 9, 2023
Malicious code in auth-test-backend (npm)
1 compromised version
- May 9, 2023
Malware in auth-test-backend
1 compromised version
- May 9, 2023
Malicious code in node-red-contrib-tfjs-object-detection (npm)
1 compromised version
- May 9, 2023
Malware in node-red-contrib-tfjs-object-detection
1 compromised version
- May 9, 2023
Malicious code in seadrop (npm)
1 compromised version
- May 9, 2023
Malware in seadrop
1 compromised version
- May 9, 2023
Malicious code in seafoam-desktop (npm)
1 compromised version
Page 6842 of 7,293