Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,131 total in npm · sorted newest first- Jun 20, 2022
Malicious code in azure-arm-containerregistry-samples-js-beta (npm)
- Jun 20, 2022
Malware in alwayson-healthmodelpanel
1 compromised version
- Jun 20, 2022
Malware in azure-arm-containerregistry-samples-js-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-containerregistry-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malware in ui-test-playwright
1 compromised version
- Jun 20, 2022
Malicious code in universaldecoder (npm)
- Jun 20, 2022
Malicious code in sample-static-html-composites (npm)
- Jun 20, 2022
Malicious code in sample-automation-tests (npm)
- Jun 20, 2022
Malicious code in component-examples (npm)
- Jun 20, 2022
Malware in component-examples
1 compromised version
- Jun 20, 2022
Malware in sample-static-html-composites
1 compromised version
- Jun 20, 2022
Malware in universaldecoder
1 compromised version
- Jun 20, 2022
Malware in sample-automation-tests
1 compromised version
- Jun 20, 2022
Malicious code in callwithchat (npm)
- Jun 20, 2022
Malicious code in azure-arm-servicefabricmesh-samples-ts-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-policyinsights-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-policyinsights-samples-js (npm)
- Jun 20, 2022
Malware in azure-arm-policyinsights-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-servicefabricmesh-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malware in callwithchat
1 compromised version
- Jun 20, 2022
Malware in azure-arm-policyinsights-samples-ts
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-storageimportexport-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-storageimportexport-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-deviceprovisioningservices-samples-js (npm)
- Jun 20, 2022
Malicious code in azps-tools (npm)
- Jun 20, 2022
Malware in azure-arm-storageimportexport-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-deviceprovisioningservices-samples-js
1 compromised version
- Jun 20, 2022
Malware in azps-tools
1 compromised version
- Jun 20, 2022
Malware in azure-arm-storageimportexport-samples-ts
1 compromised version
- Jun 20, 2022
Malicious code in cspell-version-pin (npm)
- Jun 20, 2022
Malicious code in azure-video-analyzer (npm)
- Jun 20, 2022
Malicious code in azure-arm-servicefabricmesh-samples-js-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-deviceprovisioningservices-samples-ts (npm)
- Jun 20, 2022
Malicious code in automate-loadtest-action (npm)
- Jun 20, 2022
Malware in automate-loadtest-action
1 compromised version
- Jun 20, 2022
Malware in cspell-version-pin
1 compromised version
- Jun 20, 2022
Malware in azure-arm-deviceprovisioningservices-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-video-analyzer
1 compromised version
- Jun 20, 2022
Malware in azure-arm-servicefabricmesh-samples-js-beta
1 compromised version
- Jun 20, 2022
Malicious code in azure-simple-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-iot-device-update-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-powerbidedicated-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-managementpartner-samples-ts (npm)
- Jun 20, 2022
Malware in azure-arm-managementpartner-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-simple-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-iot-device-update-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-powerbidedicated-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in azure-iot-device-update-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-storagecache-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-servicemap-samples-ts-beta (npm)
Page 4918 of 4,963