Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,637 total in npm · sorted newest first- Jun 20, 2022
Malware in bfx-facs-sftp
1 compromised version
- Jun 20, 2022
Malware in moonbeam-history
1 compromised version
- Jun 20, 2022
Malware in moonbeam-mongodb
1 compromised version
- Jun 20, 2022
Malware in bfx-stuff-ui
1 compromised version
- Jun 20, 2022
Malicious code in hive-proxy (npm)
- Jun 20, 2022
Malicious code in dazaar-pay-base (npm)
- Jun 20, 2022
Malicious code in boxgloves (npm)
- Jun 20, 2022
Malicious code in bfx-facs-grc-s3 (npm)
- Jun 20, 2022
Malware in bfx-facs-grc-s3
1 compromised version
- Jun 20, 2022
Malware in dazaar-pay-base
1 compromised version
- Jun 20, 2022
Malware in boxgloves
1 compromised version
- Jun 20, 2022
Malware in hive-proxy
1 compromised version
- Jun 20, 2022
Malicious code in traffic-report (npm)
- Jun 20, 2022
Malicious code in grenache-nodejs-utp (npm)
- Jun 20, 2022
Malicious code in grenache-nodejs-fib-server (npm)
- Jun 20, 2022
Malicious code in grenache-nodejs-fib-client (npm)
- Jun 20, 2022
Malware in traffic-report
1 compromised version
- Jun 20, 2022
Malware in grenache-nodejs-utp
1 compromised version
- Jun 20, 2022
Malware in grenache-nodejs-fib-client
1 compromised version
- Jun 20, 2022
Malware in grenache-nodejs-fib-server
1 compromised version
- Jun 20, 2022
Malicious code in woosimple (npm)
- Jun 20, 2022
Malicious code in woo-cart-expiration (npm)
- Jun 20, 2022
Malicious code in woo-better-reviews (npm)
- Jun 20, 2022
Malicious code in sticky-tax (npm)
- Jun 20, 2022
Malicious code in lw-woo-gdpr-user-optins (npm)
- Jun 20, 2022
Malware in woo-better-reviews
1 compromised version
- Jun 20, 2022
Malware in woo-cart-expiration
1 compromised version
- Jun 20, 2022
Malware in lw-woo-gdpr-user-optins
1 compromised version
- Jun 20, 2022
Malware in woosimple
1 compromised version
- Jun 20, 2022
Malware in sticky-tax
1 compromised version
- Jun 20, 2022
Malicious code in woo-interest-in-products (npm)
- Jun 20, 2022
Malicious code in liquidweb-woocommerce-gdpr (npm)
- Jun 20, 2022
Malicious code in idx-auto-tester (npm)
- Jun 20, 2022
Malware in liquidweb-woocommerce-gdpr
1 compromised version
- Jun 20, 2022
Malware in woo-interest-in-products
1 compromised version
- Jun 20, 2022
Malware in idx-auto-tester
1 compromised version
- Jun 20, 2022
Malicious code in react-hackernews-bootcamp-one-v2 (npm)
- Jun 20, 2022
Malicious code in react-bootcamp (npm)
- Jun 20, 2022
Malicious code in opendex-desktop (npm)
- Jun 20, 2022
Malicious code in engineering-portal (npm)
- Jun 20, 2022
Malicious code in developerhome (npm)
- Jun 20, 2022
Malware in react-bootcamp
1 compromised version
- Jun 20, 2022
Malware in opendex-desktop
1 compromised version
- Jun 20, 2022
Malware in developerhome
1 compromised version
- Jun 20, 2022
Malware in react-hackernews-bootcamp-one-v2
1 compromised version
- Jun 20, 2022
Malware in engineering-portal
1 compromised version
- Jun 20, 2022
Malicious code in youtrack-reports-widgets (npm)
- Jun 20, 2022
Malicious code in jb-animation-generator (npm)
- Jun 20, 2022
Malicious code in flat-surface-shader (npm)
- Jun 20, 2022
Malware in jb-animation-generator
1 compromised version
Page 4846 of 4,953