Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,168 total in npm · sorted newest first- Jun 20, 2022
Malicious code in helloworld123ccwq (npm)
- Jun 20, 2022
Malicious code in eventhubs-checkpointstore-table (npm)
- Jun 20, 2022
Malware in identity-vscode
1 compromised version
- Jun 20, 2022
Malware in identity-cache-persistence
1 compromised version
- Jun 20, 2022
Malware in helloworld123ccwq
1 compromised version
- Jun 20, 2022
Malware in eventhubs-checkpointstore-table
1 compromised version
- Jun 20, 2022
Malicious code in keyvault-admin (npm)
- Jun 20, 2022
Malicious code in iot-modelsrepository (npm)
- Jun 20, 2022
Malicious code in iot-device-update-1 (npm)
- Jun 20, 2022
Malicious code in iot-device-update (npm)
- Jun 20, 2022
Malware in keyvault-admin
1 compromised version
- Jun 20, 2022
Malware in iot-device-update
1 compromised version
- Jun 20, 2022
Malware in iot-device-update-1
1 compromised version
- Jun 20, 2022
Malware in iot-modelsrepository
1 compromised version
- Jun 20, 2022
Malicious code in opentelemetry-instrumentation-azure-sdk (npm)
- Jun 20, 2022
Malicious code in monitor-opentelemetry-exporter (npm)
- Jun 20, 2022
Malicious code in mixed-reality-remote-rendering (npm)
- Jun 20, 2022
Malicious code in mixed-reality-authentication (npm)
- Jun 20, 2022
Malware in mixed-reality-remote-rendering
1 compromised version
- Jun 20, 2022
Malware in mixed-reality-authentication
1 compromised version
- Jun 20, 2022
Malware in opentelemetry-instrumentation-azure-sdk
1 compromised version
- Jun 20, 2022
Malware in monitor-opentelemetry-exporter
1 compromised version
- Jun 20, 2022
Malicious code in storage-blob-changefeed (npm)
- Jun 20, 2022
Malicious code in quantum-jobs (npm)
- Jun 20, 2022
Malicious code in purview-scanning (npm)
- Jun 20, 2022
Malicious code in purview-catalog (npm)
- Jun 20, 2022
Malicious code in purview-administration (npm)
- Jun 20, 2022
Malware in storage-blob-changefeed
1 compromised version
- Jun 20, 2022
Malware in quantum-jobs
1 compromised version
- Jun 20, 2022
Malware in purview-scanning
1 compromised version
- Jun 20, 2022
Malware in purview-catalog
1 compromised version
- Jun 20, 2022
Malware in purview-administration
1 compromised version
- Jun 20, 2022
Malicious code in synapse-monitoring (npm)
- Jun 20, 2022
Malicious code in synapse-managed-private-endpoints (npm)
- Jun 20, 2022
Malicious code in synapse-artifacts (npm)
- Jun 20, 2022
Malicious code in synapse-access-control (npm)
- Jun 20, 2022
Malicious code in storage-queue (npm)
- Jun 20, 2022
Malware in synapse-access-control
1 compromised version
- Jun 20, 2022
Malware in synapse-monitoring
1 compromised version
- Jun 20, 2022
Malware in storage-queue
1 compromised version
- Jun 20, 2022
Malware in synapse-managed-private-endpoints
1 compromised version
- Jun 20, 2022
Malware in synapse-artifacts
1 compromised version
- Jun 20, 2022
Malicious code in videojs-wistia (npm)
- Jun 20, 2022
Malicious code in video-analyzer-edge (npm)
- Jun 20, 2022
Malicious code in synapse-spark (npm)
- Jun 20, 2022
Malware in videojs-wistia
1 compromised version
- Jun 20, 2022
Malware in synapse-spark
1 compromised version
- Jun 20, 2022
Malware in video-analyzer-edge
1 compromised version
- Jun 20, 2022
Malicious code in web-pubsub-express (npm)
- Jun 20, 2022
Malicious code in web-pubsub (npm)
Page 4913 of 4,964