Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,637 total in npm · sorted newest first- Jun 20, 2022
Malware in bfx-facs-redis-lock
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-grc
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-api
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-interval
1 compromised version
- Jun 20, 2022
Malicious code in bfx-wrk-base (npm)
- Jun 20, 2022
Malicious code in bfx-wrk-api (npm)
- Jun 20, 2022
Malicious code in bfx-util-net-js (npm)
- Jun 20, 2022
Malicious code in bfx-facs-lru (npm)
- Jun 20, 2022
Malware in bfx-wrk-base
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-lru
1 compromised version
- Jun 20, 2022
Malware in bfx-util-net-js
1 compromised version
- Jun 20, 2022
Malware in bfx-wrk-api
1 compromised version
- Jun 20, 2022
Malicious code in ufx-lib-hive-out-spec (npm)
- Jun 20, 2022
Malicious code in bfx-facs-util-shard (npm)
- Jun 20, 2022
Malicious code in bfx-facs-scheduler (npm)
- Jun 20, 2022
Malicious code in bfx-facs-redis (npm)
- Jun 20, 2022
Malicious code in bfx-facs-qout (npm)
- Jun 20, 2022
Malware in bfx-facs-scheduler
1 compromised version
- Jun 20, 2022
Malware in ufx-lib-hive-out-spec
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-qout
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-redis
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-util-shard
1 compromised version
- Jun 20, 2022
Malicious code in ufx-lib-wrk-state (npm)
- Jun 20, 2022
Malicious code in bfx-util-js (npm)
- Jun 20, 2022
Malicious code in bfx-report-ui (npm)
- Jun 20, 2022
Malicious code in bfx-hf-token-renewal-plugin (npm)
- Jun 20, 2022
Malware in bfx-report-ui
1 compromised version
- Jun 20, 2022
Malware in ufx-lib-wrk-state
1 compromised version
- Jun 20, 2022
Malware in bfx-util-js
1 compromised version
- Jun 20, 2022
Malware in bfx-hf-token-renewal-plugin
1 compromised version
- Jun 20, 2022
Malicious code in bfx-svc-js (npm)
- Jun 20, 2022
Malicious code in bfx-facs-http (npm)
- Jun 20, 2022
Malicious code in bfx-facs-deflate (npm)
- Jun 20, 2022
Malicious code in bfx-facs-db-mysql (npm)
- Jun 20, 2022
Malware in bfx-svc-js
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-deflate
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-db-mysql
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-http
1 compromised version
- Jun 20, 2022
Malicious code in bfx-report-express (npm)
- Jun 20, 2022
Malicious code in bfx-report (npm)
- Jun 20, 2022
Malicious code in bfx-facs-lokue (npm)
- Jun 20, 2022
Malicious code in bfx-facs-grc-slack (npm)
- Jun 20, 2022
Malware in bfx-facs-lokue
1 compromised version
- Jun 20, 2022
Malware in bfx-report
1 compromised version
- Jun 20, 2022
Malware in bfx-report-express
1 compromised version
- Jun 20, 2022
Malware in bfx-facs-grc-slack
1 compromised version
- Jun 20, 2022
Malicious code in ufx-ui-root (npm)
- Jun 20, 2022
Malicious code in bfx-reports-framework (npm)
- Jun 20, 2022
Malicious code in bfx-facs-bull (npm)
- Jun 20, 2022
Malicious code in bfx-facs-auth-google (npm)
Page 4844 of 4,953