Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
212,929 total in npm · sorted newest first- May 16, 2022
Malicious code in dummy-preprocessor (npm)
- May 16, 2022
Malicious code in angieslist-gulp-build-tasks (npm)
- May 16, 2022
Malicious code in testingx (npm)
- May 16, 2022
Malicious code in binance-connector-node (npm)
- May 16, 2022
Malicious code in adroit-f0-components (npm)
- May 16, 2022
Malicious code in f0-utils (npm)
- May 16, 2022
Malicious code in elysium-ui (npm)
- May 16, 2022
Malicious code in adroit-websdk-client (npm)
- May 16, 2022
Malicious code in xo-locale (npm)
- May 16, 2022
Malicious code in ual-content-page (npm)
- May 16, 2022
Malicious code in npm_test_nothing (npm)
- May 16, 2022
Malicious code in com.unity.render-pipelines.high-definition-config (npm)
- May 16, 2022
Malicious code in com.unity.searcher (npm)
- May 16, 2022
Malicious code in com.unity.probuilder (npm)
- May 16, 2022
Malicious code in speedy-ts-compiler (npm)
- May 16, 2022
Malicious code in gfg-security-utilities (npm)
- May 16, 2022
Malicious code in payoneer-scripts (npm)
- May 16, 2022
Malicious code in loaddash (npm)
- May 16, 2022
Malicious code in loadassh (npm)
- May 16, 2022
Malicious code in eslint-plugin-kavak (npm)
- May 13, 2022
Malicious code in personal-colorss (npm)
- May 11, 2022
Malicious code in jquerry (npm)
- May 9, 2022
Malicious code in opsie (npm)
- Jan 3, 2022
Malicious code in bootstrap-feature (npm)
- Dec 27, 2021
Malicious code in lib-bb-html-sanitizer (npm)
- Dec 27, 2021
Malicious code in cxp-jquery (npm)
- Dec 24, 2021
Malicious code in digital-marketing-client (npm)
- Dec 24, 2021
Malicious code in dbp-polyfills (npm)
- Nov 15, 2021
Malicious code in portal-shell (npm)
Page 4259 of 4,259