Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- May 31, 2022
Malicious code in malicious-pre-install-package (npm)
- May 31, 2022
Malware in malicious-pre-install-package
1 compromised version
- May 31, 2022
Malicious code in survey-widgets (npm)
- May 31, 2022
Malware in survey-widgets
1 compromised version
- May 31, 2022
Malicious code in sushi-client (npm)
- May 31, 2022
Malware in sushi-client
1 compromised version
- May 31, 2022
Malicious code in trezor-wallet (npm)
- May 31, 2022
Malicious code in trezor-ui-components (npm)
- May 31, 2022
Malicious code in trezor-translations-manager (npm)
- May 31, 2022
Malicious code in some-crazy-dep-that-doesnt-exist (npm)
- May 31, 2022
Malicious code in plugin-welcome (npm)
- May 31, 2022
Malicious code in next-plugin-normal (npm)
- May 31, 2022
Malware in trezor-ui-components
1 compromised version
- May 31, 2022
Malware in plugin-welcome
1 compromised version
- May 31, 2022
Malware in next-plugin-normal
1 compromised version
- May 31, 2022
Malware in some-crazy-dep-that-doesnt-exist
1 compromised version
- May 31, 2022
Malware in trezor-translations-manager
1 compromised version
- May 31, 2022
Malware in trezor-wallet
1 compromised version
- May 31, 2022
Malicious code in ads-monsuperpackage-dependency-confusion (npm)
- May 31, 2022
Malware in ads-monsuperpackage-dependency-confusion
1 compromised version
- May 31, 2022
Malicious code in pm-web-mapp-shared (npm)
- May 31, 2022
Malware in pm-web-mapp-shared
1 compromised version
- May 31, 2022
Malicious code in sherlocksecure (npm)
- May 31, 2022
Malicious code in enterprise_api_app (npm)
- May 31, 2022
Malicious code in com.unity.xr.magicleap (npm)
- May 31, 2022
Malware in com.unity.xr.magicleap
1 compromised version
- May 31, 2022
Malware in sherlocksecure
1 compromised version
- May 31, 2022
Malware in enterprise_api_app
1 compromised version
- May 31, 2022
Malicious code in colors-rgb (npm)
- May 31, 2022
Malware in colors-rgb
1 compromised version
- May 31, 2022
Malicious code in express-lastest (npm)
- May 31, 2022
Malware in express-lastest
1 compromised version
- May 31, 2022
Malicious code in web-playback-sdk-sample-app (npm)
- May 31, 2022
Malicious code in spotify.github.io (npm)
- May 31, 2022
Malicious code in perfetto-ui (npm)
- May 31, 2022
Malicious code in hls-outreach-sms (npm)
- May 31, 2022
Malware in web-playback-sdk-sample-app
1 compromised version
- May 31, 2022
Malware in hls-outreach-sms
1 compromised version
- May 31, 2022
Malware in spotify.github.io
1 compromised version
- May 31, 2022
Malware in perfetto-ui
1 compromised version
- May 31, 2022
Malicious code in maddysmith-test (npm)
- May 31, 2022
Malware in maddysmith-test
1 compromised version
- May 31, 2022
Malicious code in wireit-website (npm)
- May 31, 2022
Malicious code in react-devtools-release-script (npm)
- May 31, 2022
Malicious code in linter-marlint (npm)
- May 31, 2022
Malware in linter-marlint
1 compromised version
- May 31, 2022
Malware in react-devtools-release-script
1 compromised version
- May 31, 2022
Malware in wireit-website
1 compromised version
- May 31, 2022
Malicious code in npmupload_test-xxxxxxxxxxxxx (npm)
- May 31, 2022
Malicious code in ceye-test-0001 (npm)
Page 4825 of 4,831