Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,675 total in npm · sorted newest first- Jun 20, 2022
Malware in upholdsdk
1 compromised version
- Jun 20, 2022
Malware in keychainswift
1 compromised version
- Jun 20, 2022
Malicious code in uphold-transaction (npm)
- Jun 20, 2022
Malicious code in uphold-client-credentials-oauth (npm)
- Jun 20, 2022
Malicious code in uphold-authorization-code-oauth (npm)
- Jun 20, 2022
Malicious code in shopify-koa-app (npm)
- Jun 20, 2022
Malware in uphold-transaction
1 compromised version
- Jun 20, 2022
Malware in uphold-client-credentials-oauth
1 compromised version
- Jun 20, 2022
Malware in uphold-authorization-code-oauth
1 compromised version
- Jun 20, 2022
Malware in shopify-koa-app
1 compromised version
- Jun 20, 2022
Malicious code in airpal (npm)
- Jun 20, 2022
Malicious code in stripe-sample-checkout-with-multiple-locales (npm)
- Jun 20, 2022
Malicious code in shopify_supply (npm)
- Jun 20, 2022
Malicious code in scopely-mopub-aacebookaudiencenetwork-adapters (npm)
- Jun 20, 2022
Malware in shopify_supply
1 compromised version
- Jun 20, 2022
Malware in airpal
1 compromised version
- Jun 20, 2022
Malware in scopely-mopub-aacebookaudiencenetwork-adapters
1 compromised version
- Jun 20, 2022
Malware in stripe-sample-checkout-with-multiple-locales
1 compromised version
- Jun 20, 2022
Malicious code in affirmdev1 (npm)
- Jun 20, 2022
Malicious code in helium-pgbouncer (npm)
- Jun 20, 2022
Malicious code in helium-helios (npm)
- Jun 20, 2022
Malicious code in helium-constructor (npm)
- Jun 20, 2022
Malware in helium-helios
1 compromised version
- Jun 20, 2022
Malware in affirmdev1
1 compromised version
- Jun 20, 2022
Malware in helium-pgbouncer
1 compromised version
- Jun 20, 2022
Malware in helium-constructor
1 compromised version
- Jun 20, 2022
Malicious code in affirmdev (npm)
- Jun 20, 2022
Malicious code in paywithaffirmtheme (npm)
- Jun 20, 2022
Malicious code in magic.github.io (npm)
- Jun 20, 2022
Malicious code in elasticagent-linux-arm (npm)
- Jun 20, 2022
Malicious code in elasticagent (npm)
- Jun 20, 2022
Malware in elasticagent
1 compromised version
- Jun 20, 2022
Malware in affirmdev
1 compromised version
- Jun 20, 2022
Malware in magic.github.io
1 compromised version
- Jun 20, 2022
Malware in paywithaffirmtheme
1 compromised version
- Jun 20, 2022
Malware in elasticagent-linux-arm
1 compromised version
- Jun 20, 2022
Malicious code in ali-react-table-monorepo (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstashforwarder (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstash_reporter (npm)
- Jun 20, 2022
Malicious code in elasticagent-windows-arm (npm)
- Jun 20, 2022
Malware in elasticagent-windows-arm
1 compromised version
- Jun 20, 2022
Malware in ali-react-table-monorepo
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstashforwarder
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstash_reporter
1 compromised version
- Jun 20, 2022
Malicious code in paypal-express (npm)
- Jun 20, 2022
Malicious code in myetherwallet-kb-v5 (npm)
- Jun 20, 2022
Malicious code in myetherwallet-kb (npm)
- Jun 20, 2022
Malicious code in logi-bootstrap (npm)
- Jun 20, 2022
Malware in myetherwallet-kb
1 compromised version
- Jun 20, 2022
Malware in paypal-express
1 compromised version
Page 4842 of 4,954