Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- May 31, 2022
Malicious code in flake8-holvi (npm)
- May 31, 2022
Malware in stripe-connect-rocketrides
1 compromised version
- May 31, 2022
Malware in mb-blog
1 compromised version
- May 31, 2022
Malware in sixt
1 compromised version
- May 31, 2022
Malware in holvipartners
1 compromised version
- May 31, 2022
Malware in flake8-holvi
1 compromised version
- May 31, 2022
Malware in lyft-avidl
1 compromised version
- May 31, 2022
Malware in orangeonion.buildtools
1 compromised version
- May 31, 2022
Malicious code in colourize (npm)
- May 31, 2022
Malware in colourize
1 compromised version
- May 31, 2022
Malicious code in ai-indeed (npm)
- May 31, 2022
Malicious code in csdn-tree (npm)
- May 31, 2022
Malware in ai-indeed
1 compromised version
- May 31, 2022
Malware in csdn-tree
1 compromised version
- May 31, 2022
Malicious code in resadmin-web (npm)
- May 31, 2022
Malware in resadmin-web
1 compromised version
- May 31, 2022
Malicious code in ado-vue (npm)
- May 31, 2022
Malicious code in woocommerce-infinitepay (npm)
- May 31, 2022
Malicious code in wagtail-supertable (npm)
- May 31, 2022
Malicious code in nginxconfig.io (npm)
- May 31, 2022
Malicious code in mes-bah (npm)
- May 31, 2022
Malicious code in isomorphic-core (npm)
- May 31, 2022
Malicious code in brlc-token (npm)
- May 31, 2022
Malicious code in apollo-federation-ruby (npm)
- May 31, 2022
Malware in nginxconfig.io
1 compromised version
- May 31, 2022
Malware in apollo-federation-ruby
1 compromised version
- May 31, 2022
Malware in ado-vue
1 compromised version
- May 31, 2022
Malware in brlc-token
1 compromised version
- May 31, 2022
Malware in mes-bah
1 compromised version
- May 31, 2022
Malware in woocommerce-infinitepay
1 compromised version
- May 31, 2022
Malware in isomorphic-core
1 compromised version
- May 31, 2022
Malware in wagtail-supertable
1 compromised version
- May 31, 2022
Malicious code in vro-language-server (npm)
- May 31, 2022
Malicious code in mad-expo-core (npm)
- May 31, 2022
Malicious code in lib-admin-ui (npm)
- May 31, 2022
Malicious code in handsontable-examples (npm)
- May 31, 2022
Malware in lib-admin-ui
1 compromised version
- May 31, 2022
Malware in mad-expo-core
1 compromised version
- May 31, 2022
Malware in handsontable-examples
1 compromised version
- May 31, 2022
Malware in vro-language-server
1 compromised version
- May 31, 2022
Malicious code in spr-svg-loaders (npm)
- May 31, 2022
Malware in spr-svg-loaders
1 compromised version
- May 31, 2022
Malicious code in argo-hosting-api (npm)
- May 31, 2022
Malware in argo-hosting-api
1 compromised version
- May 31, 2022
Malicious code in mmccii (npm)
- May 31, 2022
Malware in mmccii
1 compromised version
- May 31, 2022
Malicious code in activity-dropdown-legacy (npm)
- May 31, 2022
Malware in activity-dropdown-legacy
1 compromised version
- May 31, 2022
Malicious code in eslint-plugin-pan (npm)
- May 31, 2022
Malware in eslint-plugin-pan
1 compromised version
Page 4824 of 4,831