Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- May 31, 2022
Malware in npmupload_test-xxxxxxxxxxxxx
1 compromised version
- May 31, 2022
Malware in ceye-test-0001
1 compromised version
- May 31, 2022
Malicious code in qunit-begin (npm)
- May 31, 2022
Malware in qunit-begin
1 compromised version
- May 31, 2022
Malicious code in @techops-ui/ping-authentication (npm)
- May 31, 2022
Malware in @techops-ui/ping-authentication
1 compromised version
- May 31, 2022
Malicious code in uitk-react-utils (npm)
- May 31, 2022
Malicious code in bernie-analytics (npm)
- May 31, 2022
Malicious code in bernie-abacus (npm)
- May 31, 2022
Malware in bernie-analytics
1 compromised version
- May 31, 2022
Malware in bernie-abacus
1 compromised version
- May 31, 2022
Malware in uitk-react-utils
1 compromised version
- May 31, 2022
Malicious code in web3-util-update (npm)
- May 31, 2022
Malware in web3-util-update
1 compromised version
- May 31, 2022
Malicious code in vor-test-project-npm-please-ignore-1 (npm)
- May 31, 2022
Malicious code in simple-project-pkg-b (npm)
- May 31, 2022
Malware in simple-project-pkg-b
1 compromised version
- May 31, 2022
Malware in vor-test-project-npm-please-ignore-1
1 compromised version
- May 31, 2022
Malicious code in @gpsu/common (npm)
- May 31, 2022
Malware in @gpsu/common
1 compromised version
- May 31, 2022
Malicious code in whjr-analytics (npm)
- May 31, 2022
Malicious code in react-swipeable-wrapper-example (npm)
- May 31, 2022
Malicious code in influxdb-client-examples (npm)
- May 31, 2022
Malware in whjr-analytics
1 compromised version
- May 31, 2022
Malware in react-swipeable-wrapper-example
1 compromised version
- May 31, 2022
Malware in influxdb-client-examples
1 compromised version
- May 31, 2022
Malicious code in @clover-microapp/utils-isomorphic (npm)
- May 31, 2022
Malware in @clover-microapp/utils-isomorphic
1 compromised version
- May 31, 2022
Malicious code in azuremediaplayer (npm)
- May 31, 2022
Malware in azuremediaplayer
1 compromised version
- May 31, 2022
Malicious code in oms-sentry (npm)
- May 31, 2022
Malicious code in oms-js-utils (npm)
- May 31, 2022
Malware in oms-js-utils
1 compromised version
- May 31, 2022
Malware in oms-sentry
1 compromised version
- May 31, 2022
Malicious code in sb1-adobe-analytics (npm)
- May 31, 2022
Malware in sb1-adobe-analytics
1 compromised version
- May 31, 2022
Malicious code in @tr-digital/react-rehydrate (npm)
- May 31, 2022
Malware in @tr-digital/react-rehydrate
1 compromised version
- May 31, 2022
Malicious code in react-video-live-demo (npm)
- May 31, 2022
Malicious code in flipper-frontend-core (npm)
- May 31, 2022
Malicious code in coolqueue.io (npm)
- May 31, 2022
Malware in flipper-frontend-core
1 compromised version
- May 31, 2022
Malware in coolqueue.io
1 compromised version
- May 31, 2022
Malware in react-video-live-demo
1 compromised version
- May 31, 2022
Malicious code in amber-blocks (npm)
- May 31, 2022
Malicious code in volgactf (npm)
- May 31, 2022
Malware in amber-blocks
1 compromised version
- May 31, 2022
Malware in volgactf
1 compromised version
- May 31, 2022
Malicious code in @logistics-frontend/types (npm)
- May 31, 2022
Malicious code in @logistics-frontend/polyfills (npm)
Page 4826 of 4,831