Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,123 total · sorted newest first- Feb 23, 2023
Malicious code in guicandy (PyPI)
- Feb 23, 2023
Malicious code in getpyw (PyPI)
- Feb 23, 2023
Malicious code in gamecpu (PyPI)
- Feb 23, 2023
Malicious code in ultrapost (PyPI)
- Feb 23, 2023
Malicious code in ramram (PyPI)
- Feb 23, 2023
Malicious code in guivm (PyPI)
- Feb 23, 2023
Malicious code in grandpy (PyPI)
- Feb 23, 2023
Malicious code in cpucpu (PyPI)
- Feb 23, 2023
Malicious code in candyhttp (PyPI)
- Feb 23, 2023
Malicious code in urlultra (PyPI)
- Feb 23, 2023
Malicious code in pipmine (PyPI)
- Feb 23, 2023
Malicious code in mcsuper (PyPI)
- Feb 23, 2023
Malicious code in mcgrand (PyPI)
- Feb 23, 2023
Malicious code in candygrand (PyPI)
- Feb 23, 2023
Malicious code in candyad (PyPI)
- Feb 23, 2023
Malicious code in toolmc (PyPI)
- Feb 23, 2023
Malicious code in httpmc (PyPI)
- Feb 23, 2023
Malicious code in postinfo (PyPI)
- Feb 23, 2023
Malicious code in guiad (PyPI)
- Feb 23, 2023
Malicious code in toolpy (PyPI)
- Feb 23, 2023
Malicious code in ramad (PyPI)
- Feb 23, 2023
Malicious code in minepost (PyPI)
- Feb 23, 2023
Malicious code in loadlib (PyPI)
- Feb 23, 2023
Malicious code in getload (PyPI)
- Feb 23, 2023
Malicious code in ramhttp (PyPI)
- Feb 23, 2023
Malicious code in infogame (PyPI)
- Feb 23, 2023
Malicious code in grandurl (PyPI)
- Feb 23, 2023
Malicious code in craftre (PyPI)
- Feb 23, 2023
Malicious code in supertool (PyPI)
- Feb 23, 2023
Malicious code in loadinfo (PyPI)
- Feb 23, 2023
Malicious code in infopost (PyPI)
- Feb 23, 2023
Malicious code in revm (PyPI)
- Feb 23, 2023
Malicious code in pywload (PyPI)
- Feb 23, 2023
Malicious code in httpad (PyPI)
- Feb 23, 2023
Malicious code in vmload (PyPI)
- Feb 23, 2023
Malicious code in mineinfo (PyPI)
- Feb 23, 2023
Malicious code in guicpu (PyPI)
- Feb 23, 2023
Malicious code in urlvm (PyPI)
- Feb 23, 2023
Malicious code in recandy (PyPI)
- Feb 23, 2023
Malicious code in vminfo (PyPI)
- Feb 23, 2023
Malicious code in fca-zaaraowo (npm)
- Feb 23, 2023
Malware in fca-zaaraowo
1 compromised version
- Feb 23, 2023
Malicious code in xsstesttttttttt (npm)
- Feb 23, 2023
Malware in xsstesttttttttt
1 compromised version
- Feb 23, 2023
Malicious code in pagseguro-utils-test (npm)
- Feb 23, 2023
Malicious code in @pagseguro/stylelint-config (npm)
- Feb 23, 2023
Malicious code in @pagseguro/psit (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-validations (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-security-services (npm)
- Feb 23, 2023
Malicious code in @pagseguro/ps-requests-ws (npm)
Page 6974 of 7,303