Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,675 total in npm · sorted newest first- Jun 20, 2022
Malware in plugin-plugins
1 compromised version
- Jun 20, 2022
Malware in hoob-bot
1 compromised version
- Jun 20, 2022
Malicious code in volga-solv3 (npm)
- Jun 20, 2022
Malicious code in urlinator (npm)
- Jun 20, 2022
Malicious code in hubspot-dlb (npm)
- Jun 20, 2022
Malicious code in head-dlb (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-elastic-charts (npm)
- Jun 20, 2022
Malicious code in bats-file (npm)
- Jun 20, 2022
Malware in bats-file
1 compromised version
- Jun 20, 2022
Malware in urlinator
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-elastic-charts
1 compromised version
- Jun 20, 2022
Malware in head-dlb
1 compromised version
- Jun 20, 2022
Malware in volga-solv3
1 compromised version
- Jun 20, 2022
Malware in hubspot-dlb
1 compromised version
- Jun 20, 2022
Malicious code in types-publisher (npm)
- Jun 20, 2022
Malicious code in nx-azure (npm)
- Jun 20, 2022
Malware in nx-azure
1 compromised version
- Jun 20, 2022
Malware in types-publisher
1 compromised version
- Jun 20, 2022
Malicious code in multivalue-control-extension (npm)
- Jun 20, 2022
Malicious code in loki-price (npm)
- Jun 20, 2022
Malicious code in jixmaooc (npm)
- Jun 20, 2022
Malicious code in favcount (npm)
- Jun 20, 2022
Malware in favcount
1 compromised version
- Jun 20, 2022
Malware in jixmaooc
1 compromised version
- Jun 20, 2022
Malware in multivalue-control-extension
1 compromised version
- Jun 20, 2022
Malware in loki-price
1 compromised version
- Jun 20, 2022
Malicious code in synobot (npm)
- Jun 20, 2022
Malicious code in octo-styleguide (npm)
- Jun 20, 2022
Malicious code in h98d (npm)
- Jun 20, 2022
Malicious code in eng-package-utils (npm)
- Jun 20, 2022
Malicious code in autorest-extension-base (npm)
- Jun 20, 2022
Malware in autorest-extension-base
1 compromised version
- Jun 20, 2022
Malware in octo-styleguide
1 compromised version
- Jun 20, 2022
Malware in synobot
1 compromised version
- Jun 20, 2022
Malware in h98d
1 compromised version
- Jun 20, 2022
Malware in eng-package-utils
1 compromised version
- Jun 20, 2022
Malicious code in uphold-transaction-sample (npm)
- Jun 20, 2022
Malicious code in uphold-client-credentials-oauth-sample (npm)
- Jun 20, 2022
Malicious code in uphold-authorization-code-oauth-sample (npm)
- Jun 20, 2022
Malicious code in avddeploy (npm)
- Jun 20, 2022
Malware in avddeploy
1 compromised version
- Jun 20, 2022
Malware in uphold-authorization-code-oauth-sample
1 compromised version
- Jun 20, 2022
Malware in uphold-transaction-sample
1 compromised version
- Jun 20, 2022
Malware in uphold-client-credentials-oauth-sample
1 compromised version
- Jun 20, 2022
Malicious code in upholdsdk (npm)
- Jun 20, 2022
Malicious code in uphold-pat-sample (npm)
- Jun 20, 2022
Malicious code in uphold-pat (npm)
- Jun 20, 2022
Malicious code in keychainswift (npm)
- Jun 20, 2022
Malware in uphold-pat
1 compromised version
- Jun 20, 2022
Malware in uphold-pat-sample
1 compromised version
Page 4841 of 4,954