Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- May 31, 2022
Malicious code in @logistics-frontend/ndd (npm)
- May 31, 2022
Malicious code in @logistics-frontend/modules (npm)
- May 31, 2022
Malicious code in @logistics-frontend/hooks (npm)
- May 31, 2022
Malicious code in @logistics-frontend/core (npm)
- May 31, 2022
Malware in @logistics-frontend/hooks
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/ndd
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/polyfills
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/modules
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/core
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/types
1 compromised version
- May 31, 2022
Malicious code in @logistics-frontend/utils (npm)
- May 31, 2022
Malicious code in @logistics-frontend/ui-old (npm)
- May 31, 2022
Malicious code in @logistics-frontend/client-core (npm)
- May 31, 2022
Malicious code in @logistics-frontend/blocks (npm)
- May 31, 2022
Malware in @logistics-frontend/ui-old
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/utils
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/client-core
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/blocks
1 compromised version
- May 31, 2022
Malicious code in dragox-utilities (npm)
- May 31, 2022
Malware in dragox-utilities
1 compromised version
- May 31, 2022
Malicious code in colors_express (npm)
- May 31, 2022
Malware in colors_express
1 compromised version
- May 23, 2022
Malicious code in @kibt/weblogger (npm)
- May 23, 2022
Malicious code in @kibt/operation-track (npm)
- May 23, 2022
Malware in @kibt/weblogger
1 compromised version
- May 23, 2022
Malware in @kibt/operation-track
1 compromised version
- May 19, 2022
Malicious code in mollie-design-system (npm)
- May 19, 2022
Malicious code in dgse-tools-mgm-elf-helper (npm)
- May 19, 2022
Malicious code in ddc-new-relic (npm)
- May 19, 2022
Malicious code in ddc-classnames-js (npm)
- May 19, 2022
Malicious code in axp-utility-belt (npm)
- May 19, 2022
Malicious code in axp-shared-scripts (npm)
- May 19, 2022
Malicious code in axp-base (npm)
- May 19, 2022
Malware in axp-utility-belt
1 compromised version
- May 19, 2022
Malware in ddc-new-relic
1 compromised version
- May 19, 2022
Malware in axp-shared-scripts
1 compromised version
- May 19, 2022
Malware in dgse-tools-mgm-elf-helper
1 compromised version
- May 19, 2022
Malware in mollie-design-system
1 compromised version
- May 19, 2022
Malware in ddc-classnames-js
1 compromised version
- May 19, 2022
Malware in axp-base
1 compromised version
- May 19, 2022
Malicious code in website-404-error-page (npm)
- May 19, 2022
Malware in website-404-error-page
1 compromised version
- May 18, 2022
Malicious code in starter-theme (npm)
- May 18, 2022
Malicious code in pp-react-buttons (npm)
- May 18, 2022
Malicious code in pp-mp-connected-path (npm)
- May 18, 2022
Malicious code in paypal-rest-sample (npm)
- May 18, 2022
Malicious code in epic-support-prettier-config (npm)
- May 18, 2022
Malicious code in epic-games-self-service-portal (npm)
- May 18, 2022
Malware in epic-support-prettier-config
1 compromised version
- May 18, 2022
Malware in paypal-rest-sample
1 compromised version
Page 4827 of 4,831