Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,637 total in npm · sorted newest first- Jun 20, 2022
Malicious code in copay-website (npm)
- Jun 20, 2022
Malicious code in bitcore-website (npm)
- Jun 20, 2022
Malware in bitcore-website
1 compromised version
- Jun 20, 2022
Malware in satoshi-fire-alarm
1 compromised version
- Jun 20, 2022
Malware in lemonade-stand
1 compromised version
- Jun 20, 2022
Malware in copay-website
1 compromised version
- Jun 20, 2022
Malicious code in music-store (npm)
- Jun 20, 2022
Malicious code in copay-whitepaper (npm)
- Jun 20, 2022
Malicious code in copay-shell (npm)
- Jun 20, 2022
Malicious code in bitpay-cordova-sdk (npm)
- Jun 20, 2022
Malware in bitpay-cordova-sdk
1 compromised version
- Jun 20, 2022
Malware in music-store
1 compromised version
- Jun 20, 2022
Malware in copay-shell
1 compromised version
- Jun 20, 2022
Malware in copay-whitepaper
1 compromised version
- Jun 20, 2022
Malicious code in ui-challenge (npm)
- Jun 20, 2022
Malicious code in range-for-chrome (npm)
- Jun 20, 2022
Malicious code in range-export (npm)
- Jun 20, 2022
Malicious code in bitpay-rest-client (npm)
- Jun 20, 2022
Malware in range-export
1 compromised version
- Jun 20, 2022
Malware in bitpay-rest-client
1 compromised version
- Jun 20, 2022
Malware in ui-challenge
1 compromised version
- Jun 20, 2022
Malware in range-for-chrome
1 compromised version
- Jun 20, 2022
Malicious code in allure-js (npm)
- Jun 20, 2022
Malicious code in bfxuilib (npm)
- Jun 20, 2022
Malicious code in bem-mvc (npm)
- Jun 20, 2022
Malicious code in bankin_thechnical_test (npm)
- Jun 20, 2022
Malicious code in bankin_thechnical (npm)
- Jun 20, 2022
Malware in bfxuilib
1 compromised version
- Jun 20, 2022
Malware in bem-mvc
1 compromised version
- Jun 20, 2022
Malware in allure-js
1 compromised version
- Jun 20, 2022
Malware in bankin_thechnical
1 compromised version
- Jun 20, 2022
Malware in bankin_thechnical_test
1 compromised version
- Jun 20, 2022
Malicious code in skip-reason-validator (npm)
- Jun 20, 2022
Malicious code in next-10-local (npm)
- Jun 20, 2022
Malicious code in gemini-exports (npm)
- Jun 20, 2022
Malicious code in color-processing (npm)
- Jun 20, 2022
Malware in color-processing
1 compromised version
- Jun 20, 2022
Malware in next-10-local
1 compromised version
- Jun 20, 2022
Malware in gemini-exports
1 compromised version
- Jun 20, 2022
Malware in skip-reason-validator
1 compromised version
- Jun 20, 2022
Malicious code in sanitizer-polyfill (npm)
- Jun 20, 2022
Malicious code in gatsby-theme-lego (npm)
- Jun 20, 2022
Malicious code in boogi (npm)
- Jun 20, 2022
Malware in boogi
1 compromised version
- Jun 20, 2022
Malware in sanitizer-polyfill
1 compromised version
- Jun 20, 2022
Malware in gatsby-theme-lego
1 compromised version
- Jun 20, 2022
Malicious code in addons-server (npm)
- Jun 20, 2022
Malicious code in addons-code-manager (npm)
- Jun 20, 2022
Malicious code in turicreate-user-interface (npm)
- Jun 20, 2022
Malicious code in fxa-admin-server (npm)
Page 4851 of 4,953