Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,213 total · sorted newest first- Mar 7, 2023
Malicious code in milo-api (npm)
- Mar 7, 2023
Malicious code in fca-milo-mod (npm)
- Mar 7, 2023
Malware in milo-cute
1 compromised version
- Mar 7, 2023
Malware in milo-api
1 compromised version
- Mar 7, 2023
Malware in fca-milo-mod
1 compromised version
- Mar 7, 2023
Malicious code in fca-sumi (npm)
- Mar 7, 2023
Malware in fca-sumi
1 compromised version
- Mar 7, 2023
Malicious code in selfhydrastudycc (PyPI)
- Mar 7, 2023
Malicious code in selfccvirtualgame (PyPI)
- Mar 7, 2023
Malicious code in tpintelpullcpu (PyPI)
- Mar 7, 2023
Malicious code in selfrandompullver (PyPI)
- Mar 7, 2023
Malicious code in selfproofstudyrand (PyPI)
- Mar 7, 2023
Malicious code in esqgameloadrandom (PyPI)
- Mar 7, 2023
Malicious code in selfinturlstudy (PyPI)
- Mar 7, 2023
Malicious code in libvirtualsplitstring (PyPI)
- Mar 7, 2023
Malicious code in libpipinfoad (PyPI)
- Mar 7, 2023
Malicious code in libcontrolverlgtb (PyPI)
- Mar 7, 2023
Malicious code in esqlibkillstr (PyPI)
- Mar 7, 2023
Malicious code in tpreloadad (PyPI)
- Mar 7, 2023
Malicious code in selfpaypalcontrolsuper (PyPI)
- Mar 7, 2023
Malicious code in esqsplitpushpush (PyPI)
- Mar 7, 2023
Malicious code in selflibmineload (PyPI)
- Mar 7, 2023
Malicious code in py-infohydrarandom (PyPI)
- Mar 7, 2023
Malicious code in tpstringcraftget (PyPI)
- Mar 7, 2023
Malicious code in libpywstrvm (PyPI)
- Mar 7, 2023
Malicious code in esqproofpongint (PyPI)
- Mar 7, 2023
Malicious code in selfosintgrandrandom (PyPI)
- Mar 7, 2023
Malicious code in fca-dark-rulex (npm)
- Mar 7, 2023
Malware in fca-dark-rulex
1 compromised version
- Mar 6, 2023
Malicious code in opium-contracts (npm)
- Mar 6, 2023
Malware in opium-contracts
1 compromised version
- Mar 6, 2023
Malicious code in web-ui-design-tokens (npm)
- Mar 6, 2023
Malicious code in owa-trace (npm)
- Mar 6, 2023
Malicious code in owa-theme (npm)
- Mar 6, 2023
Malicious code in owa-strings (npm)
- Mar 6, 2023
Malicious code in owa-sprite (npm)
- Mar 6, 2023
Malicious code in owa-fabric-theme (npm)
- Mar 6, 2023
Malware in web-ui-design-tokens
1 compromised version
- Mar 6, 2023
Malware in owa-sprite
1 compromised version
- Mar 6, 2023
Malware in owa-fabric-theme
1 compromised version
- Mar 6, 2023
Malware in owa-theme
1 compromised version
- Mar 6, 2023
Malware in owa-trace
1 compromised version
- Mar 6, 2023
Malware in owa-strings
1 compromised version
- Mar 6, 2023
Malicious code in axios-proxy (npm)
- Mar 6, 2023
Malware in axios-proxy
1 compromised version
- Mar 6, 2023
Malicious code in ing-feat-chat-components (npm)
1 compromised version
- Mar 6, 2023
Malware in ing-feat-chat-components
1 compromised version
- Mar 6, 2023
Malicious code in ing-feat-customer-video (npm)
- Mar 6, 2023
Malware in ing-feat-customer-video
1 compromised version
- Mar 4, 2023
Malicious code in lime-web-component-interfaces (npm)
1 compromised version
Page 6868 of 7,305