Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,202 total · sorted newest first- Feb 25, 2023
Malicious code in pongrand (PyPI)
- Feb 25, 2023
Malicious code in intelrand (PyPI)
- Feb 25, 2023
Malicious code in cvping (PyPI)
- Feb 25, 2023
Malicious code in pongpost (PyPI)
- Feb 25, 2023
Malicious code in paypalload (PyPI)
- Feb 25, 2023
Malicious code in guistr (PyPI)
- Feb 25, 2023
Malicious code in cvstudy (PyPI)
- Feb 25, 2023
Malicious code in studypong (PyPI)
- Feb 25, 2023
Malicious code in studylib (PyPI)
- Feb 25, 2023
Malicious code in lgtbre (PyPI)
- Feb 25, 2023
Malicious code in killhydra (PyPI)
- Feb 25, 2023
Malicious code in hackedpost (PyPI)
- Feb 25, 2023
Malicious code in edcv (PyPI)
- Feb 25, 2023
Malicious code in postpost (PyPI)
- Feb 25, 2023
Malicious code in loadrandom (PyPI)
- Feb 25, 2023
Malicious code in hackedpush (PyPI)
- Feb 25, 2023
Malicious code in randpaypal (PyPI)
- Feb 25, 2023
Malicious code in intint (PyPI)
- Feb 25, 2023
Malicious code in gamestr (PyPI)
- Feb 25, 2023
Malicious code in gameintel (PyPI)
- Feb 25, 2023
Malicious code in visapush (PyPI)
- Feb 25, 2023
Malicious code in replacecpu (PyPI)
- Feb 25, 2023
Malicious code in osintvm (PyPI)
- Feb 25, 2023
Malicious code in mineproof (PyPI)
- Feb 25, 2023
Malicious code in cvint (PyPI)
- Feb 25, 2023
Malicious code in ultrarand (PyPI)
- Feb 25, 2023
Malicious code in pushvm (PyPI)
- Feb 25, 2023
Malicious code in strram (PyPI)
- Feb 25, 2023
Malicious code in pywosint (PyPI)
- Feb 25, 2023
Malicious code in hydrarand (PyPI)
- Feb 25, 2023
Malicious code in verpong (PyPI)
- Feb 25, 2023
Malicious code in hackedcraft (PyPI)
- Feb 25, 2023
Malicious code in pongpip (PyPI)
- Feb 25, 2023
Malicious code in candypong (PyPI)
- Feb 25, 2023
Malicious code in randget (PyPI)
- Feb 25, 2023
Malicious code in lgtbultra (PyPI)
- Feb 25, 2023
Malicious code in stringgrand (PyPI)
- Feb 25, 2023
Malicious code in intpaypal (PyPI)
- Feb 25, 2023
Malicious code in mineintel (PyPI)
- Feb 25, 2023
Malicious code in studyload (PyPI)
- Feb 25, 2023
Malicious code in pongpush (PyPI)
- Feb 25, 2023
Malicious code in randgui (PyPI)
- Feb 25, 2023
Malicious code in grandkill (PyPI)
- Feb 25, 2023
Malicious code in vervisa (PyPI)
- Feb 25, 2023
Malicious code in pywint (PyPI)
- Feb 25, 2023
Malicious code in adpaypal (PyPI)
- Feb 25, 2023
Malicious code in discord-colors (npm)
- Feb 25, 2023
Malware in discord-colors
1 compromised version
- Feb 25, 2023
Malicious code in hakaiz (npm)
- Feb 25, 2023
Malicious code in discord.js-v12-updated (npm)
Page 6958 of 7,305