Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,767 total in npm · sorted newest first- Jun 20, 2022
Malicious code in gfhide (npm)
- Jun 20, 2022
Malware in testpkgabc
1 compromised version
- Jun 20, 2022
Malware in gfhide
1 compromised version
- Jun 20, 2022
Malware in test-hitesh
1 compromised version
- Jun 20, 2022
Malware in winston-pg-native
1 compromised version
- Jun 20, 2022
Malware in strapi-provider-upload-aws-s3-auth
1 compromised version
- Jun 20, 2022
Malicious code in hide0x99 (npm)
- Jun 20, 2022
Malicious code in hide023 (npm)
- Jun 20, 2022
Malicious code in hide-pay (npm)
- Jun 20, 2022
Malware in hide023
1 compromised version
- Jun 20, 2022
Malware in hide-pay
1 compromised version
- Jun 20, 2022
Malware in hide0x99
1 compromised version
- Jun 20, 2022
Malicious code in peoplemath (npm)
- Jun 20, 2022
Malicious code in mimo0 (npm)
- Jun 20, 2022
Malicious code in hide990 (npm)
- Jun 20, 2022
Malicious code in hide330 (npm)
- Jun 20, 2022
Malware in hide330
1 compromised version
- Jun 20, 2022
Malware in hide990
1 compromised version
- Jun 20, 2022
Malware in mimo0
1 compromised version
- Jun 20, 2022
Malware in peoplemath
1 compromised version
- Jun 20, 2022
Malicious code in amiga-services-tools (npm)
- Jun 20, 2022
Malicious code in testsrko (npm)
- Jun 20, 2022
Malicious code in jscs-server (npm)
- Jun 20, 2022
Malicious code in helloworldrk (npm)
- Jun 20, 2022
Malicious code in gestor-leads (npm)
- Jun 20, 2022
Malware in helloworldrk
1 compromised version
- Jun 20, 2022
Malware in amiga-services-tools
1 compromised version
- Jun 20, 2022
Malware in jscs-server
1 compromised version
- Jun 20, 2022
Malware in gestor-leads
1 compromised version
- Jun 20, 2022
Malware in testsrko
1 compromised version
- Jun 20, 2022
Malicious code in amiga-services-cache (npm)
- Jun 20, 2022
Malicious code in amiga-services (npm)
- Jun 20, 2022
Malicious code in dwg-components (npm)
- Jun 20, 2022
Malicious code in dropins_sdk_refactor (npm)
- Jun 20, 2022
Malware in amiga-services-cache
1 compromised version
- Jun 20, 2022
Malware in dropins_sdk_refactor
1 compromised version
- Jun 20, 2022
Malware in amiga-services
1 compromised version
- Jun 20, 2022
Malware in dwg-components
1 compromised version
- Jun 20, 2022
Malicious code in prod_assets_web_modules (npm)
- Jun 20, 2022
Malicious code in patientenapp (npm)
- Jun 20, 2022
Malicious code in jessa-vue-components (npm)
- Jun 20, 2022
Malicious code in cobrowse-common (npm)
- Jun 20, 2022
Malware in patientenapp
1 compromised version
- Jun 20, 2022
Malware in cobrowse-common
1 compromised version
- Jun 20, 2022
Malware in jessa-vue-components
1 compromised version
- Jun 20, 2022
Malware in prod_assets_web_modules
1 compromised version
- Jun 20, 2022
Malicious code in your-module-name (npm)
- Jun 20, 2022
Malicious code in rnx-kit-scripts (npm)
- Jun 20, 2022
Malicious code in @pornhub/alerts (npm)
- Jun 20, 2022
Malicious code in noblox.js-beta (npm)
Page 4839 of 4,956