Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,202 total · sorted newest first- Feb 25, 2023
Malicious code in discord.js-lukyy (npm)
- Feb 25, 2023
Malicious code in discord.js-hakaix (npm)
- Feb 25, 2023
Malicious code in discord.js-hakaiw (npm)
- Feb 25, 2023
Malicious code in discord.js-hakai-v2 (npm)
- Feb 25, 2023
Malicious code in discord.js-hakai (npm)
- Feb 25, 2023
Malware in discord.js-hakai
1 compromised version
- Feb 25, 2023
Malware in hakaiz
1 compromised version
- Feb 25, 2023
Malware in discord.js-lukyy
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakaix
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakai-v2
1 compromised version
- Feb 25, 2023
Malware in discord.js-v12-updated
1 compromised version
- Feb 25, 2023
Malware in discord.js-hakaiw
1 compromised version
- Feb 25, 2023
Malicious code in object-color (npm)
- Feb 25, 2023
Malware in object-color
1 compromised version
- Feb 24, 2023
Malicious code in proofcv (PyPI)
- Feb 24, 2023
Malicious code in getcandy (PyPI)
- Feb 24, 2023
Malicious code in visatool (PyPI)
- Feb 24, 2023
Malicious code in loadhttp (PyPI)
- Feb 24, 2023
Malicious code in proofpy (PyPI)
- Feb 24, 2023
Malicious code in advirtual (PyPI)
- Feb 24, 2023
Malicious code in hydrahydra (PyPI)
- Feb 24, 2023
Malicious code in proofcandy (PyPI)
- Feb 24, 2023
Malicious code in minemc (PyPI)
- Feb 24, 2023
Malicious code in urlvisa (PyPI)
- Feb 24, 2023
Malicious code in hydratool (PyPI)
- Feb 24, 2023
Malicious code in grandmine (PyPI)
- Feb 24, 2023
Malicious code in proofre (PyPI)
- Feb 24, 2023
Malicious code in cvmc (PyPI)
- Feb 24, 2023
Malicious code in pepload (PyPI)
- Feb 24, 2023
Malicious code in ultracontrol (PyPI)
- Feb 24, 2023
Malicious code in pyproof (PyPI)
- Feb 24, 2023
Malicious code in proofmc (PyPI)
- Feb 24, 2023
Malicious code in virtualhttp (PyPI)
- Feb 24, 2023
Malicious code in proofad (PyPI)
- Feb 24, 2023
Malicious code in postgame (PyPI)
- Feb 24, 2023
Malicious code in toolhydra (PyPI)
- Feb 24, 2023
Malicious code in maskinfo (PyPI)
- Feb 24, 2023
Malicious code in controlinfo (PyPI)
- Feb 24, 2023
Malicious code in controlvisa (PyPI)
- Feb 24, 2023
Malicious code in controlvirtual (PyPI)
- Feb 24, 2023
Malicious code in ccmc (PyPI)
- Feb 24, 2023
Malicious code in getsuper (PyPI)
- Feb 24, 2023
Malicious code in httpproof (PyPI)
- Feb 24, 2023
Malicious code in pipre (PyPI)
- Feb 24, 2023
Malicious code in proofurl (PyPI)
- Feb 24, 2023
Malicious code in hydravisa (PyPI)
- Feb 24, 2023
Malicious code in hydravirtual (PyPI)
- Feb 24, 2023
Malicious code in cvhttp (PyPI)
- Feb 24, 2023
Malicious code in proofpep (PyPI)
- Feb 24, 2023
Malicious code in libproof (PyPI)
Page 6959 of 7,305