Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,648 total in npm · sorted newest first- Jun 20, 2022
Malicious code in gitnpmrce (npm)
- Jun 20, 2022
Malicious code in githubnpmrce101 (npm)
- Jun 20, 2022
Malicious code in githubnpmrce1 (npm)
- Jun 20, 2022
Malware in gittt101
1 compromised version
- Jun 20, 2022
Malware in githubnpmrce101
1 compromised version
- Jun 20, 2022
Malware in gitnpmrce
1 compromised version
- Jun 20, 2022
Malware in githubnpmrce1
1 compromised version
- Jun 20, 2022
Malicious code in aio-cli-config (npm)
- Jun 20, 2022
Malicious code in icons-vk (npm)
- Jun 20, 2022
Malicious code in gitnpmrceee90 (npm)
- Jun 20, 2022
Malicious code in dcrdex-assets (npm)
- Jun 20, 2022
Malicious code in browserslist-config-freight-trust (npm)
- Jun 20, 2022
Malicious code in blind-threshold-bls (npm)
- Jun 20, 2022
Malware in gitnpmrceee90
1 compromised version
- Jun 20, 2022
Malware in icons-vk
1 compromised version
- Jun 20, 2022
Malware in blind-threshold-bls
1 compromised version
- Jun 20, 2022
Malware in browserslist-config-freight-trust
1 compromised version
- Jun 20, 2022
Malware in dcrdex-assets
1 compromised version
- Jun 20, 2022
Malware in aio-cli-config
1 compromised version
- Jun 20, 2022
Malicious code in sjcl-extended (npm)
- Jun 20, 2022
Malicious code in report-visualizer (npm)
- Jun 20, 2022
Malicious code in page-b (npm)
- Jun 20, 2022
Malware in page-b
1 compromised version
- Jun 20, 2022
Malware in sjcl-extended
1 compromised version
- Jun 20, 2022
Malware in report-visualizer
1 compromised version
- Jun 20, 2022
Malicious code in sdk-app-uptime-monitoring (npm)
- Jun 20, 2022
Malicious code in pay-with-amazon (npm)
- Jun 20, 2022
Malicious code in ethereumjs-utils-old (npm)
- Jun 20, 2022
Malicious code in breakout-chat-server (npm)
- Jun 20, 2022
Malware in ethereumjs-utils-old
1 compromised version
- Jun 20, 2022
Malware in sdk-app-uptime-monitoring
1 compromised version
- Jun 20, 2022
Malware in breakout-chat-server
1 compromised version
- Jun 20, 2022
Malware in pay-with-amazon
1 compromised version
- Jun 20, 2022
Malicious code in @zenhomes/frontend-dev-login (npm)
- Jun 20, 2022
Malicious code in mrg-polyfills (npm)
- Jun 20, 2022
Malicious code in hellof1sh (npm)
- Jun 20, 2022
Malicious code in dumporify (npm)
- Jun 20, 2022
Malware in dumporify
1 compromised version
- Jun 20, 2022
Malware in mrg-polyfills
1 compromised version
- Jun 20, 2022
Malware in hellof1sh
1 compromised version
- Jun 20, 2022
Malware in @zenhomes/frontend-dev-login
1 compromised version
- Jun 20, 2022
Malicious code in link-stripper2 (npm)
- Jun 20, 2022
Malicious code in bfx-facs-store-s3 (npm)
- Jun 20, 2022
Malicious code in bfx-facs-db-better-sqlite (npm)
- Jun 20, 2022
Malicious code in bfx-facs-base (npm)
- Jun 20, 2022
Malware in bfx-facs-base
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-store-s3
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-db-better-sqlite
1 compromised version
- Jun 20, 2022
Malware in link-stripper2
1 compromised version
- Jun 20, 2022
Malicious code in hypercore-logs (npm)
Page 4843 of 4,953