Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,787 total in npm · sorted newest first- Jun 20, 2022
Malware in zmarta-analytics
1 compromised version
- Jun 20, 2022
Malware in @audi-cct/teaser-feature-app
1 compromised version
- Jun 20, 2022
Malicious code in zmarta (npm)
- Jun 20, 2022
Malicious code in trusona (npm)
- Jun 20, 2022
Malicious code in opbox-web-browser (npm)
- Jun 20, 2022
Malicious code in noblox.js-promises (npm)
- Jun 20, 2022
Malware in noblox.js-promises
1 compromised version
- Jun 20, 2022
Malware in trusona
1 compromised version
- Jun 20, 2022
Malware in zmarta
1 compromised version
- Jun 20, 2022
Malware in opbox-web-browser
1 compromised version
- Jun 20, 2022
Malicious code in sketch-multi-lingual-plugin (npm)
- Jun 20, 2022
Malicious code in sbb-esta (npm)
- Jun 20, 2022
Malicious code in sbb-angular (npm)
- Jun 20, 2022
Malicious code in pictogrameditor (npm)
- Jun 20, 2022
Malware in sbb-angular
1 compromised version
- Jun 20, 2022
Malware in sketch-multi-lingual-plugin
1 compromised version
- Jun 20, 2022
Malware in pictogrameditor
1 compromised version
- Jun 20, 2022
Malware in sbb-esta
1 compromised version
- Jun 20, 2022
Malicious code in prop-validators (npm)
- Jun 20, 2022
Malicious code in mrg-nano-xhr (npm)
- Jun 20, 2022
Malicious code in looloo (npm)
- Jun 20, 2022
Malicious code in comments2 (npm)
- Jun 20, 2022
Malware in looloo
1 compromised version
- Jun 20, 2022
Malware in prop-validators
1 compromised version
- Jun 20, 2022
Malware in comments2
1 compromised version
- Jun 20, 2022
Malware in mrg-nano-xhr
1 compromised version
- Jun 20, 2022
Malicious code in prism-jest (npm)
- Jun 20, 2022
Malicious code in oz-player (npm)
- Jun 20, 2022
Malicious code in ntnx-price-calculator (npm)
- Jun 20, 2022
Malicious code in ntnx-i18n (npm)
- Jun 20, 2022
Malicious code in @evilpacket/art (npm)
- Jun 20, 2022
Malware in ntnx-price-calculator
1 compromised version
- Jun 20, 2022
Malware in prism-jest
1 compromised version
- Jun 20, 2022
Malware in ntnx-i18n
1 compromised version
- Jun 20, 2022
Malware in @evilpacket/art
1 compromised version
- Jun 20, 2022
Malware in oz-player
1 compromised version
- Jun 20, 2022
Malicious code in epic-games-nav-shared (npm)
- Jun 20, 2022
Malicious code in @exnessimo/style (npm)
- Jun 20, 2022
Malicious code in @epic-mod-market/ui (npm)
- Jun 20, 2022
Malicious code in 2k-utils (npm)
- Jun 20, 2022
Malware in epic-games-nav-shared
1 compromised version
- Jun 20, 2022
Malware in 2k-utils
1 compromised version
- Jun 20, 2022
Malware in @exnessimo/style
1 compromised version
- Jun 20, 2022
Malware in @epic-mod-market/ui
1 compromised version
- Jun 20, 2022
Malicious code in ahmadsalameh-tp (npm)
- Jun 20, 2022
Malicious code in ac-toolkit (npm)
- Jun 20, 2022
Malicious code in shared-it-appmod-ui (npm)
- Jun 20, 2022
Malicious code in blancoservices (npm)
- Jun 20, 2022
Malware in ac-toolkit
1 compromised version
- Jun 20, 2022
Malware in blancoservices
1 compromised version
Page 4834 of 4,956