Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,637 total in npm · sorted newest first- Jun 20, 2022
Malware in youtrack-personal-timetracking
1 compromised version
- Jun 20, 2022
Malware in teamcity-investigations
1 compromised version
- Jun 20, 2022
Malicious code in teamcity-project-status (npm)
- Jun 20, 2022
Malicious code in svgo-ruby (npm)
- Jun 20, 2022
Malicious code in rxp-js (npm)
- Jun 20, 2022
Malicious code in firebase-radar (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-grailed (npm)
- Jun 20, 2022
Malware in svgo-ruby
1 compromised version
- Jun 20, 2022
Malware in rxp-js
1 compromised version
- Jun 20, 2022
Malware in firebase-radar
1 compromised version
- Jun 20, 2022
Malware in teamcity-project-status
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-grailed
1 compromised version
- Jun 20, 2022
Malicious code in amazing_auth_rails (npm)
- Jun 20, 2022
Malicious code in node-es6-seed (npm)
- Jun 20, 2022
Malicious code in ng-focus-next (npm)
- Jun 20, 2022
Malware in amazing_auth_rails
1 compromised version
- Jun 20, 2022
Malware in node-es6-seed
1 compromised version
- Jun 20, 2022
Malware in ng-focus-next
1 compromised version
- Jun 20, 2022
Malicious code in stackdriver-pushgateway (npm)
- Jun 20, 2022
Malicious code in node-namshi-mysql (npm)
- Jun 20, 2022
Malicious code in metric-watcher (npm)
- Jun 20, 2022
Malicious code in glip-integration-trello (npm)
- Jun 20, 2022
Malicious code in com.ringcentral (npm)
- Jun 20, 2022
Malware in com.ringcentral
1 compromised version
- Jun 20, 2022
Malware in glip-integration-trello
1 compromised version
- Jun 20, 2022
Malware in node-namshi-mysql
1 compromised version
- Jun 20, 2022
Malware in stackdriver-pushgateway
1 compromised version
- Jun 20, 2022
Malware in metric-watcher
1 compromised version
- Jun 20, 2022
Malicious code in testring-build (npm)
- Jun 20, 2022
Malicious code in redtail-embeddable-ringcentral-phone (npm)
- Jun 20, 2022
Malicious code in glip-integration-github (npm)
- Jun 20, 2022
Malware in redtail-embeddable-ringcentral-phone
1 compromised version
- Jun 20, 2022
Malware in glip-integration-github
1 compromised version
- Jun 20, 2022
Malware in testring-build
1 compromised version
- Jun 20, 2022
Malicious code in ringcentral-community-app (npm)
- Jun 20, 2022
Malicious code in rc-add-in-demo (npm)
- Jun 20, 2022
Malicious code in rc-add-in (npm)
- Jun 20, 2022
Malicious code in pipedrive-embeddable-ringcentral-phone-spa (npm)
- Jun 20, 2022
Malware in rc-add-in
1 compromised version
- Jun 20, 2022
Malware in ringcentral-community-app
1 compromised version
- Jun 20, 2022
Malware in rc-add-in-demo
1 compromised version
- Jun 20, 2022
Malware in pipedrive-embeddable-ringcentral-phone-spa
1 compromised version
- Jun 20, 2022
Malicious code in ringcentral-js-widgets (npm)
- Jun 20, 2022
Malicious code in ringcentral-embeddable (npm)
- Jun 20, 2022
Malicious code in pipedrive-embeddable-engage-phone (npm)
- Jun 20, 2022
Malicious code in glip-integration-bugsnag (npm)
- Jun 20, 2022
Malicious code in engage-voice-embeddable (npm)
- Jun 20, 2022
Malware in ringcentral-embeddable
1 compromised version
- Jun 20, 2022
Malware in pipedrive-embeddable-engage-phone
1 compromised version
- Jun 20, 2022
Malware in ringcentral-js-widgets
1 compromised version
Page 4848 of 4,953