Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,168 total in npm · sorted newest first- Jun 20, 2022
Malicious code in arm-workspaces (npm)
- Jun 20, 2022
Malicious code in arm-webservices (npm)
- Jun 20, 2022
Malicious code in arm-webpubsub (npm)
- Jun 20, 2022
Malware in arm-webpubsub
1 compromised version
- Jun 20, 2022
Malware in arm-webservices
1 compromised version
- Jun 20, 2022
Malware in arm-workspaces
1 compromised version
- Jun 20, 2022
Malware in communication-chat
1 compromised version
- Jun 20, 2022
Malware in communication-common
1 compromised version
- Jun 20, 2022
Malicious code in communication-short-codes (npm)
- Jun 20, 2022
Malicious code in communication-phone-numbers (npm)
- Jun 20, 2022
Malicious code in communication-network-traversal (npm)
- Jun 20, 2022
Malicious code in communication-identity (npm)
- Jun 20, 2022
Malware in communication-phone-numbers
1 compromised version
- Jun 20, 2022
Malware in communication-network-traversal
1 compromised version
- Jun 20, 2022
Malware in communication-short-codes
1 compromised version
- Jun 20, 2022
Malware in communication-identity
1 compromised version
- Jun 20, 2022
Malicious code in core-asynciterator-polyfill (npm)
- Jun 20, 2022
Malicious code in core-amqp (npm)
- Jun 20, 2022
Malicious code in confidential-ledger (npm)
- Jun 20, 2022
Malicious code in communication-sms (npm)
- Jun 20, 2022
Malware in communication-sms
1 compromised version
- Jun 20, 2022
Malware in core-asynciterator-polyfill
1 compromised version
- Jun 20, 2022
Malware in confidential-ledger
1 compromised version
- Jun 20, 2022
Malware in core-amqp
1 compromised version
- Jun 20, 2022
Malicious code in core-http-compat (npm)
- Jun 20, 2022
Malicious code in core-http (npm)
- Jun 20, 2022
Malicious code in core-client-1 (npm)
- Jun 20, 2022
Malicious code in core-auth (npm)
- Jun 20, 2022
Malware in core-auth
1 compromised version
- Jun 20, 2022
Malware in core-client-1
1 compromised version
- Jun 20, 2022
Malware in core-http-compat
1 compromised version
- Jun 20, 2022
Malware in core-http
1 compromised version
- Jun 20, 2022
Malicious code in core-xml (npm)
- Jun 20, 2022
Malicious code in core-tracing (npm)
- Jun 20, 2022
Malicious code in core-rest-pipeline (npm)
- Jun 20, 2022
Malicious code in core-paging (npm)
- Jun 20, 2022
Malware in core-tracing
1 compromised version
- Jun 20, 2022
Malware in core-rest-pipeline
1 compromised version
- Jun 20, 2022
Malware in core-xml
1 compromised version
- Jun 20, 2022
Malware in core-paging
1 compromised version
- Jun 20, 2022
Malicious code in eventhubs-checkpointstore-blob (npm)
- Jun 20, 2022
Malicious code in eslint-plugin-azure-sdk (npm)
- Jun 20, 2022
Malicious code in dtdl-parser (npm)
- Jun 20, 2022
Malicious code in digital-twins-core (npm)
- Jun 20, 2022
Malware in digital-twins-core
1 compromised version
- Jun 20, 2022
Malware in eslint-plugin-azure-sdk
1 compromised version
- Jun 20, 2022
Malware in dtdl-parser
1 compromised version
- Jun 20, 2022
Malware in eventhubs-checkpointstore-blob
1 compromised version
- Jun 20, 2022
Malicious code in identity-vscode (npm)
- Jun 20, 2022
Malicious code in identity-cache-persistence (npm)
Page 4912 of 4,964