Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 23, 2026
Malware in evm-validation
1 compromised version
- Sep 23, 2026
Malware in hardhat-hold
1 compromised version
- Sep 23, 2026
Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm)
3 compromised versions
- Sep 23, 2026
Malicious code in memoryos (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in kerokwis (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in kerokwis (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in @gsutevil/hta-stage (npm)
1 compromised version
- Sep 22, 2026
Malicious code in n8n-nodes-data-transformer-utils (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tvg-mar/promos-context (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tvg-mar/promos-gtm (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tvg-mar/storyblok-bridge (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tvg-mar/utils (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tvg-mar/tvg-promos-atomic-ui (npm)
1 compromised version
- Sep 22, 2026
Malicious code in wurl_show_data (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in poly-check-b (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in auclean (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in crypto-trader-py (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in ubiquiti-agents-link-mcp (npm)
1 compromised version
- Sep 22, 2026
Malicious code in no-fun (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in snap-queue (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in no-fun (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in auclean (PyPI)
3 compromised versions
- Sep 22, 2026
Malicious code in ubiquiti-agents-link-mcp (npm)
4 compromised versions
- Sep 22, 2026
Malicious code in snap-queue (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in poly-check-b (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in crypto-trader-py (PyPI)
1 compromised version
- Sep 22, 2026
Malicious code in @mikudeveloper/baileys (npm)
1 compromised version
- Sep 22, 2026
Malicious code in nodetokyo (npm)
1 compromised version
- Sep 22, 2026
Malicious code in noverojava (npm)
1 compromised version
- Sep 22, 2026
Malicious code in oracle-redis (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @mr-supun-fernando/supunmd-bail (npm)
1 compromised version
- Sep 22, 2026
Malicious code in tailwind-form-styles (npm)
1 compromised version
- Sep 22, 2026
Malware in tailwind-form-styles
1 compromised version
- Sep 22, 2026
Malicious code in node-env-buffer (npm)
2 compromised versions
- Sep 22, 2026
Malicious code in envparse3 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in envparse2 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in envforge3 (npm)
1 compromised version
- Sep 22, 2026
Malicious code in envforge2 (npm)
1 compromised version
- Sep 22, 2026
Malware in envparse3
1 compromised version
- Sep 22, 2026
Malware in envparse2
1 compromised version
- Sep 22, 2026
Malware in action-slack-message-root
1 compromised version
- Sep 22, 2026
Malware in envforge2
1 compromised version
- Sep 22, 2026
Malware in envforge3
1 compromised version
- Sep 22, 2026
Malware in better-envforge
1 compromised version
- Sep 22, 2026
Malware in node-env-buffer
1 compromised version
- Sep 22, 2026
Malware in chai-as-viem
1 compromised version
- Sep 22, 2026
Malicious code in sysverify (npm)
3 compromised versions
- Sep 22, 2026
Malware in sysverify
1 compromised version
- Sep 22, 2026
Malware in @pwaplatform/module-sso-integration
1 compromised version
- Sep 22, 2026
Malicious code in ndmcmsujey (npm)
1 compromised version
Page 75 of 7,312