Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 28, 2026
Malware in uuid-date
1 compromised version
- Sep 28, 2026
Malicious code in @bb1ptest23/test-paket (npm)
1 compromised version
- Sep 28, 2026
Malicious code in riot-private (npm)
- Sep 28, 2026
Malware in swiper_angular
1 compromised version
- Sep 28, 2026
Malware in riot-private
1 compromised version
- Sep 28, 2026
Malware in capacitor-plugin-service-worker
1 compromised version
- Sep 28, 2026
Malware in seek-pass
1 compromised version
- Sep 28, 2026
Malware in api-typings
1 compromised version
- Sep 28, 2026
Malware in discord-mfa-solver
1 compromised version
- Sep 28, 2026
Malware in ultra-ws
1 compromised version
- Sep 28, 2026
Malicious code in vinzzsync-wacli (npm)
1 compromised version
- Sep 28, 2026
Malware in vinzzsync-wacli
1 compromised version
- Sep 28, 2026
Malicious code in tanksync (npm)
9 compromised versions
- Sep 28, 2026
Malware in open-item-validator
1 compromised version
- Sep 28, 2026
Malware in tanksync
1 compromised version
- Sep 28, 2026
Malicious code in @consts/links (npm)
- Sep 28, 2026
Malware in @consts/links
1 compromised version
- Sep 28, 2026
Malware in discord-resolvers
1 compromised version
- Sep 28, 2026
Malware in spotify-url-resolvers
1 compromised version
- Sep 28, 2026
Malware in discord-players
1 compromised version
- Sep 28, 2026
Malicious code in @digi-kernel/digi-kernel-constrains (npm)
- Sep 28, 2026
Malware in @digi-kernel/digi-kernel-constrains
1 compromised version
- Sep 28, 2026
Malicious code in @bb1ptest23/test-paket (npm)
1 compromised version
- Sep 27, 2026
Malicious code in aseity (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in scrapetools2 (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in scrapetools2 (PyPI)
4 compromised versions
- Sep 27, 2026
Malicious code in aseity (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in caracas4check (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in coinscan (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in caracas4check (PyPI)
2 compromised versions
- Sep 27, 2026
Malicious code in coinscan (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrio (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrics-sdk (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in donutpromotion (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in claudedashbord (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in claudedashbord (PyPI)
4 compromised versions
- Sep 27, 2026
Malicious code in donutpromotion (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in metrics-sdk (PyPI)
3 compromised versions
- Sep 27, 2026
Malicious code in metrio (PyPI)
3 compromised versions
- Sep 27, 2026
Malicious code in donutautosellsrc (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in requests-cache-utils (PyPI)
1 compromised version
- Sep 27, 2026
Malicious code in donutautosellsrc (PyPI)
3 compromised versions
- Sep 26, 2026
Malicious code in requests-cache-utils (PyPI)
1 compromised version
- Sep 26, 2026
Malicious code in cma-self-hosted-sandbox-cf (npm)
1 compromised version
- Sep 26, 2026
Malicious code in chai-as-relay (npm)
1 compromised version
- Sep 26, 2026
Malicious code in chai-as-relay (npm)
1 compromised version
- Sep 26, 2026
Malicious code in cma-self-hosted-sandbox-cf (npm)
1 compromised version
- Sep 26, 2026
Malicious code in sherpy (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in @digift/cli (npm)
1 compromised version
- Sep 25, 2026
Malicious code in sherpy (PyPI)
2 compromised versions
Page 69 of 7,312