Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Sep 5, 2022
Malicious code in default-color (npm)
- Sep 5, 2022
Malware in default-color
1 compromised version
- Sep 5, 2022
Malicious code in zero-falhas-vilao (npm)
- Sep 5, 2022
Malware in zero-falhas-vilao
1 compromised version
- Sep 2, 2022
Malicious code in wix-bi-logger-client (npm)
- Sep 2, 2022
Malicious code in bigcom (npm)
- Sep 2, 2022
Malware in bigcom
1 compromised version
- Sep 2, 2022
Malware in wix-bi-logger-client
1 compromised version
- Sep 2, 2022
Malicious code in @jr0ch17/rce-jr0ch17 (npm)
- Sep 2, 2022
Malicious code in directive-daterange (npm)
- Sep 2, 2022
Malware in @jr0ch17/rce-jr0ch17
1 compromised version
- Sep 2, 2022
Malware in directive-daterange
1 compromised version
- Sep 1, 2022
Malicious code in discord.js-selfasta (npm)
- Sep 1, 2022
Malware in discord.js-selfasta
1 compromised version
- Aug 30, 2022
Malicious code in winrpcexploit (PyPI)
- Aug 30, 2022
WINRPCexploit malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in browserdiv (PyPI)
- Aug 30, 2022
browserdiv malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in zlibsrc (PyPI)
- Aug 30, 2022
zlibsrc malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in free-net-vpn2 (PyPI)
- Aug 30, 2022
free-net-vpn2 malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in free-net-vpn (PyPI)
- Aug 30, 2022
free-net-vpn malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in test-async (PyPI)
- Aug 30, 2022
test-async malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in pyproto2 (PyPI)
- Aug 30, 2022
PyProto2 malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in pymocks (PyPI)
- Aug 30, 2022
pymocks malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in pyg-utils (PyPI)
- Aug 30, 2022
pyg-utils malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in ascii2text (PyPI)
- Aug 30, 2022
ascii2text malicious PyPI package
1 compromised version
- Aug 30, 2022
Malicious code in moble (npm)
- Aug 30, 2022
Malicious code in jembot (npm)
- Aug 30, 2022
Malicious code in imgfacebook (npm)
- Aug 30, 2022
Malicious code in funtion (npm)
- Aug 30, 2022
Malware in moble
1 compromised version
- Aug 30, 2022
Malware in imgfacebook
1 compromised version
- Aug 30, 2022
Malware in funtion
1 compromised version
- Aug 30, 2022
Malware in jembot
1 compromised version
- Aug 30, 2022
Malicious code in tweetnalc (npm)
- Aug 30, 2022
Malicious code in otip (npm)
- Aug 30, 2022
Malicious code in discordjs-selfbot-11 (npm)
- Aug 30, 2022
Malicious code in authinit (npm)
- Aug 30, 2022
Malware in discordjs-selfbot-11
1 compromised version
- Aug 30, 2022
Malware in authinit
1 compromised version
- Aug 30, 2022
Malware in otip
1 compromised version
- Aug 30, 2022
Malware in tweetnalc
1 compromised version
Page 7011 of 7,293