Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,727 total in npm · sorted newest first- Jun 20, 2022
Malicious code in jenkins-autoscaling (npm)
- Jun 20, 2022
Malicious code in fastly-realtime-stats-prod (npm)
- Jun 20, 2022
Malware in pfselfservice-frontend
1 compromised version
- Jun 20, 2022
Malware in fastly-realtime-stats-prod
1 compromised version
- Jun 20, 2022
Malware in teamcity-cdk
1 compromised version
- Jun 20, 2022
Malware in jenkins-autoscaling
1 compromised version
- Jun 20, 2022
Malicious code in pfselfservice-backend (npm)
- Jun 20, 2022
Malicious code in dev-desktop (npm)
- Jun 20, 2022
Malicious code in commerce-ml-cdk (npm)
- Jun 20, 2022
Malicious code in artifactory-cdk (npm)
- Jun 20, 2022
Malware in artifactory-cdk
1 compromised version
- Jun 20, 2022
Malware in dev-desktop
1 compromised version
- Jun 20, 2022
Malware in commerce-ml-cdk
1 compromised version
- Jun 20, 2022
Malware in pfselfservice-backend
1 compromised version
- Jun 20, 2022
Malicious code in twitch-phoenix (npm)
- Jun 20, 2022
Malicious code in tslint-twitch (npm)
- Jun 20, 2022
Malicious code in event-replicator (npm)
- Jun 20, 2022
Malicious code in charon-relay-cloudwatch (npm)
- Jun 20, 2022
Malware in event-replicator
1 compromised version
- Jun 20, 2022
Malware in twitch-phoenix
1 compromised version
- Jun 20, 2022
Malware in tslint-twitch
1 compromised version
- Jun 20, 2022
Malware in charon-relay-cloudwatch
1 compromised version
- Jun 20, 2022
Malicious code in twitch-core-ui (npm)
- Jun 20, 2022
Malicious code in omega-pac (npm)
- Jun 20, 2022
Malicious code in ipdel-cdk (npm)
- Jun 20, 2022
Malicious code in bouncer-auth-js (npm)
- Jun 20, 2022
Malware in ipdel-cdk
1 compromised version
- Jun 20, 2022
Malware in twitch-core-ui
1 compromised version
- Jun 20, 2022
Malware in bouncer-auth-js
1 compromised version
- Jun 20, 2022
Malware in omega-pac
1 compromised version
- Jun 20, 2022
Malicious code in wafer-image (npm)
- Jun 20, 2022
Malicious code in wafer-geolocation (npm)
- Jun 20, 2022
Malicious code in wafer-caas (npm)
- Jun 20, 2022
Malicious code in meaaasured (npm)
- Jun 20, 2022
Malware in meaaasured
1 compromised version
- Jun 20, 2022
Malware in wafer-geolocation
1 compromised version
- Jun 20, 2022
Malware in wafer-image
1 compromised version
- Jun 20, 2022
Malware in wafer-caas
1 compromised version
- Jun 20, 2022
Malicious code in wafer-toggle (npm)
- Jun 20, 2022
Malicious code in remote-pay-cloud-starter-example-typescript (npm)
- Jun 20, 2022
Malicious code in remote-pay-cloud-starter-example (npm)
- Jun 20, 2022
Malicious code in remote-pay-cloud-pos-react (npm)
- Jun 20, 2022
Malicious code in remote-pay-cloud-nodejs-example (npm)
- Jun 20, 2022
Malware in remote-pay-cloud-pos-react
1 compromised version
- Jun 20, 2022
Malware in wafer-toggle
1 compromised version
- Jun 20, 2022
Malware in remote-pay-cloud-starter-example
1 compromised version
- Jun 20, 2022
Malware in remote-pay-cloud-starter-example-typescript
1 compromised version
- Jun 20, 2022
Malware in remote-pay-cloud-nodejs-example
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.xr.arsubsystems (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.terrain (npm)
Page 4884 of 4,975