Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,846 total in npm · sorted newest first- Jun 20, 2022
Malware in wm-xpath-utils
1 compromised version
- Jun 20, 2022
Malware in wm-prelib-plugin-entry-manager
1 compromised version
- Jun 20, 2022
Malware in wm-logzio-sender
1 compromised version
- Jun 20, 2022
Malicious code in wm-jquery-shadow-dom (npm)
- Jun 20, 2022
Malicious code in my-toolchain (npm)
- Jun 20, 2022
Malicious code in cyclic-dep-2 (npm)
- Jun 20, 2022
Malicious code in cyclic-dep-1 (npm)
- Jun 20, 2022
Malware in cyclic-dep-2
1 compromised version
- Jun 20, 2022
Malware in cyclic-dep-1
1 compromised version
- Jun 20, 2022
Malware in wm-jquery-shadow-dom
1 compromised version
- Jun 20, 2022
Malware in my-toolchain
1 compromised version
- Jun 20, 2022
Malicious code in tslint-shared (npm)
- Jun 20, 2022
Malicious code in minimum-flow-parser (npm)
- Jun 20, 2022
Malicious code in ember-views (npm)
- Jun 20, 2022
Malicious code in ember-handlebars (npm)
- Jun 20, 2022
Malware in minimum-flow-parser
1 compromised version
- Jun 20, 2022
Malware in tslint-shared
1 compromised version
- Jun 20, 2022
Malware in ember-views
1 compromised version
- Jun 20, 2022
Malware in ember-handlebars
1 compromised version
- Jun 20, 2022
Malicious code in perf-benchmarks-components (npm)
- Jun 20, 2022
Malicious code in npm-test-failer (npm)
- Jun 20, 2022
Malicious code in lwc-modules-foo (npm)
- Jun 20, 2022
Malicious code in google-cloud-node-todos (npm)
- Jun 20, 2022
Malware in lwc-modules-foo
1 compromised version
- Jun 20, 2022
Malware in google-cloud-node-todos
1 compromised version
- Jun 20, 2022
Malware in perf-benchmarks-components
1 compromised version
- Jun 20, 2022
Malware in npm-test-failer
1 compromised version
- Jun 20, 2022
Malicious code in airbnb-cookie (npm)
- Jun 20, 2022
Malicious code in ubuntu-drivers-common (npm)
- Jun 20, 2022
Malicious code in isomsorphic-react-dom (npm)
- Jun 20, 2022
Malicious code in grunt-modify-json (npm)
- Jun 20, 2022
Malicious code in barisan (npm)
- Jun 20, 2022
Malware in isomsorphic-react-dom
1 compromised version
- Jun 20, 2022
Malware in airbnb-cookie
1 compromised version
- Jun 20, 2022
Malware in barisan
1 compromised version
- Jun 20, 2022
Malware in grunt-modify-json
1 compromised version
- Jun 20, 2022
Malware in ubuntu-drivers-common
1 compromised version
- Jun 20, 2022
Malicious code in eslint-plugin-orbit-kotko (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-orbit-internal (npm)
- Jun 20, 2022
Malicious code in checkpackagejson (npm)
- Jun 20, 2022
Malware in checkpackagejson
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-orbit-kotko
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-orbit-internal
1 compromised version
- Jun 20, 2022
Malicious code in wp-scripts (npm)
- Jun 20, 2022
Malicious code in swisscom (npm)
- Jun 20, 2022
Malicious code in npp-analytics (npm)
- Jun 20, 2022
Malicious code in kottestpackage (npm)
- Jun 20, 2022
Malicious code in depconftesttest (npm)
- Jun 20, 2022
Malware in depconftesttest
1 compromised version
- Jun 20, 2022
Malware in swisscom
1 compromised version
Page 4877 of 5,077