Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,505 total in npm · sorted newest first- Jun 20, 2022
Malicious code in focal-manual-tests (npm)
- Jun 20, 2022
Malware in ws-gp-security-action
1 compromised version
- Jun 20, 2022
Malware in 0-dns
1 compromised version
- Jun 20, 2022
Malware in shubhtestingit
1 compromised version
- Jun 20, 2022
Malware in focal-manual-tests
1 compromised version
- Jun 20, 2022
Malicious code in adaptivecards-designer-app (npm)
- Jun 20, 2022
Malicious code in qs-state-visualizer (npm)
- Jun 20, 2022
Malicious code in panther-github-actions (npm)
- Jun 20, 2022
Malicious code in mattermost-oauth2-client-sample-app (npm)
- Jun 20, 2022
Malicious code in encryptte-test (npm)
- Jun 20, 2022
Malware in encryptte-test
1 compromised version
- Jun 20, 2022
Malware in qs-state-visualizer
1 compromised version
- Jun 20, 2022
Malware in panther-github-actions
1 compromised version
- Jun 20, 2022
Malware in mattermost-oauth2-client-sample-app
1 compromised version
- Jun 20, 2022
Malware in adaptivecards-designer-app
1 compromised version
- Jun 20, 2022
Malicious code in vue-docs-image-recognition (npm)
- Jun 20, 2022
Malicious code in rm-deployment-status-enhancer-tab (npm)
- Jun 20, 2022
Malicious code in msal-react-quickstart (npm)
- Jun 20, 2022
Malicious code in focal-todomvc (npm)
- Jun 20, 2022
Malware in vue-docs-image-recognition
1 compromised version
- Jun 20, 2022
Malware in rm-deployment-status-enhancer-tab
1 compromised version
- Jun 20, 2022
Malware in focal-todomvc
1 compromised version
- Jun 20, 2022
Malware in msal-react-quickstart
1 compromised version
- Jun 20, 2022
Malicious code in pingone-angular-registration (npm)
- Jun 20, 2022
Malicious code in launcher-start-page (npm)
- Jun 20, 2022
Malicious code in elastic-apm-rum (npm)
- Jun 20, 2022
Malware in pingone-angular-registration
1 compromised version
- Jun 20, 2022
Malware in elastic-apm-rum
1 compromised version
- Jun 20, 2022
Malware in launcher-start-page
1 compromised version
- Jun 20, 2022
Malicious code in ing-orange-login-sca-es (npm)
- Jun 20, 2022
Malicious code in ing-app-login-sca-es (npm)
- Jun 20, 2022
Malicious code in @idse/core (npm)
- Jun 20, 2022
Malicious code in @idse/common-ui (npm)
- Jun 20, 2022
Malware in ing-app-login-sca-es
1 compromised version
- Jun 20, 2022
Malware in @idse/common-ui
1 compromised version
- Jun 20, 2022
Malware in ing-orange-login-sca-es
1 compromised version
- Jun 20, 2022
Malware in @idse/core
1 compromised version
- Jun 20, 2022
Malicious code in yelp-react-component-ynra (npm)
- Jun 20, 2022
Malicious code in pj-reporting-frontend (npm)
- Jun 20, 2022
Malicious code in ing.app.transactional (npm)
- Jun 20, 2022
Malicious code in imodel-query-agent (npm)
- Jun 20, 2022
Malware in pj-reporting-frontend
1 compromised version
- Jun 20, 2022
Malware in yelp-react-component-ynra
1 compromised version
- Jun 20, 2022
Malware in imodel-query-agent
1 compromised version
- Jun 20, 2022
Malware in ing.app.transactional
1 compromised version
- Jun 20, 2022
Malicious code in wgversion (npm)
- Jun 20, 2022
Malicious code in three-d-secure (npm)
- Jun 20, 2022
Malicious code in siteversion (npm)
- Jun 20, 2022
Malicious code in local-payment (npm)
- Jun 20, 2022
Malware in local-payment
1 compromised version
Page 4906 of 4,971