Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- May 18, 2022
Malware in pp-react-buttons
1 compromised version
- May 18, 2022
Malware in epic-games-self-service-portal
1 compromised version
- May 18, 2022
Malware in pp-mp-connected-path
1 compromised version
- May 18, 2022
Malware in starter-theme
1 compromised version
- May 18, 2022
Malicious code in dom-diff-exporter (npm)
- May 18, 2022
Malicious code in diff-dom-2 (npm)
- May 18, 2022
Malware in dom-diff-exporter
1 compromised version
- May 18, 2022
Malware in diff-dom-2
1 compromised version
- May 18, 2022
Malicious code in videojs-vtt (npm)
- May 18, 2022
Malicious code in @commercialsalesandmarketing/contact-search (npm)
- May 18, 2022
Malware in videojs-vtt
1 compromised version
- May 18, 2022
Malware in @commercialsalesandmarketing/contact-search
1 compromised version
- May 18, 2022
Malicious code in pg-ng-popover (npm)
- May 18, 2022
Malware in pg-ng-popover
1 compromised version
- May 18, 2022
Malicious code in pco_api (npm)
- May 18, 2022
Malware in pco_api
1 compromised version
- May 17, 2022
Malicious code in angieslist-composed-components (npm)
- May 17, 2022
Malicious code in girolv (npm)
- May 17, 2022
Malware in angieslist-composed-components
1 compromised version
- May 17, 2022
Malware in girolv
1 compromised version
- May 17, 2022
Malicious code in zureexplorer2 (npm)
- May 17, 2022
Malware in zureexplorer2
1 compromised version
- May 17, 2022
Malicious code in somewhereinbetween (npm)
- May 17, 2022
Malware in somewhereinbetween
1 compromised version
- May 17, 2022
Malicious code in venzuella333 (npm)
- May 17, 2022
Malware in venzuella333
1 compromised version
- May 17, 2022
Malicious code in dortmond22 (npm)
- May 17, 2022
Malware in dortmond22
1 compromised version
- May 17, 2022
Malicious code in venzuela-oil (npm)
- May 17, 2022
Malware in venzuela-oil
1 compromised version
- May 17, 2022
Malicious code in nodefreaksolivan (npm)
- May 17, 2022
Malware in nodefreaksolivan
1 compromised version
- May 17, 2022
Malicious code in theremontada12 (npm)
- May 17, 2022
Malware in theremontada12
1 compromised version
- May 17, 2022
Malicious code in dontblowthisoff (npm)
- May 17, 2022
Malware in dontblowthisoff
1 compromised version
- May 17, 2022
Malicious code in sameethinghere101 (npm)
- May 17, 2022
Malware in sameethinghere101
1 compromised version
- May 17, 2022
Malicious code in bfx-hf-func-data (npm)
- May 17, 2022
Malware in bfx-hf-func-data
1 compromised version
- May 17, 2022
Malicious code in threatresponse (npm)
- May 17, 2022
Malicious code in testapp00009 (npm)
- May 17, 2022
Malicious code in systemuser (npm)
- May 17, 2022
Malware in threatresponse
1 compromised version
- May 17, 2022
Malware in systemuser
1 compromised version
- May 17, 2022
Malware in testapp00009
1 compromised version
- May 17, 2022
Malicious code in alimaa (npm)
- May 17, 2022
Malicious code in zuanshi (npm)
- May 17, 2022
Malicious code in yadanga (npm)
- May 17, 2022
Malicious code in xiawaa (npm)
Page 4828 of 4,831