Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- May 9, 2023
Malware in animoto_full_version_portable_crack_rt
1 compromised version
- May 8, 2023
Malicious code in mesbah-unclaim (npm)
3 compromised versions
- May 8, 2023
Malicious code in com.unity.test-runner-manual-tests (npm)
1 compromised version
- May 8, 2023
Malicious code in com.unity.xrtools.spatial-hash (npm)
1 compromised version
- May 8, 2023
Malicious code in a2b_hex (npm)
1 compromised version
- May 8, 2023
Malicious code in discord-spammer-webhooks (npm)
- May 8, 2023
Malicious code in selfpyintpaypal (PyPI)
- May 8, 2023
Malicious code in selfcontrolloadload (PyPI)
- May 7, 2023
Malicious code in py-intellibint (PyPI)
- May 7, 2023
Malicious code in esqgameencodereplace (PyPI)
- May 7, 2023
Malicious code in libpipultravirtual (PyPI)
- May 5, 2023
Malicious code in pmcrypto-v7 (npm)
1 compromised version
- May 5, 2023
Malicious code in pmcrypto-v7-test (npm)
1 compromised version
- May 5, 2023
Malicious code in serverless-action (npm)
1 compromised version
- May 5, 2023
Malicious code in suncorp-styleguide-react-components (npm)
4 compromised versions
- May 5, 2023
Malicious code in sagemakertransformers (PyPI)
1 compromised version
- May 5, 2023
Malicious code in back-alley (npm)
1 compromised version
- May 5, 2023
Malicious code in confusedatma (npm)
3 compromised versions
- May 5, 2023
Malicious code in font-forno (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-dlb (npm)
1 compromised version
- May 4, 2023
Malicious code in pcorbr-ui-framework (npm)
1 compromised version
- May 4, 2023
Malicious code in santander-portal-node-library (npm)
1 compromised version
- May 4, 2023
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)
1 compromised version
- May 4, 2023
Malicious code in bitshares-ui-style-guide (npm)
1 compromised version
- May 4, 2023
Malicious code in postaggingcorenlp (npm)
1 compromised version
- May 4, 2023
Malicious code in idcs-dialog (npm)
2 compromised versions
- May 4, 2023
Malicious code in music-pro (npm)
- May 4, 2023
Malware in music-pro
1 compromised version
- May 4, 2023
Malicious code in modified_bayes (RubyGems)
2 compromised versions
- May 4, 2023
Malicious code in nemocloud (npm)
1 compromised version
- May 4, 2023
Malicious code in ban-notifier4 (npm)
1 compromised version
- May 4, 2023
Malicious code in microsoft_kiota_http (RubyGems)
1 compromised version
- May 3, 2023
Malicious code in kobi--front-helpers (npm)
3 compromised versions
- May 3, 2023
Malicious code in libtpu-nightly (PyPI)
1 compromised version
- May 3, 2023
Malicious code in not-a-real-project (npm)
1 compromised version
- May 3, 2023
Malicious code in not-a-real-dep (npm)
1 compromised version
- May 3, 2023
Malicious code in api-code-capture-chrome-extension (npm)
1 compromised version
- May 3, 2023
Malicious code in afterpay-sdk-example-server (npm)
3 compromised versions
- May 3, 2023
Malicious code in another-dev-dependency3 (npm)
1 compromised version
- May 3, 2023
Malicious code in spring-boot-admin-virgil-custom-ui (npm)
4 compromised versions
- May 3, 2023
Malicious code in virgil-spring-boot-starter (npm)
1 compromised version
- May 3, 2023
Malicious code in capacity-planning-projection (npm)
2 compromised versions
- May 2, 2023
Malicious code in staging-opbox-web-browser (npm)
1 compromised version
- May 2, 2023
Malicious code in react-orange-ui (npm)
3 compromised versions
- May 2, 2023
Malware in react-orange-ui
1 compromised version
- May 2, 2023
Malicious code in fkletbbpoc (npm)
1 compromised version
- May 2, 2023
Malicious code in opbox-seller-shop-service (npm)
1 compromised version
- May 2, 2023
Malicious code in opbox-web (npm)
1 compromised version
- May 2, 2023
Malicious code in proton-pack (npm)
5 compromised versions
- May 2, 2023
Malicious code in proton-account (npm)
3 compromised versions
Page 6857 of 7,305