Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,131 total in npm · sorted newest first- Jun 20, 2022
Malicious code in azure-arm-peering-samples-js (npm)
- Jun 20, 2022
Malware in azure-arm-storagecache-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-peering-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-iot-device-update-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-servicemap-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-visualstudio-samples-js-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-support-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-signalr-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-reservations-samples-ts (npm)
- Jun 20, 2022
Malware in azure-arm-support-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-signalr-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-visualstudio-samples-js-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-reservations-samples-ts
1 compromised version
- Jun 20, 2022
Malicious code in azure-communication-phone-numbers-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-support-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-storsimple8000series-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-ai-document-translator-samples-ts (npm)
- Jun 20, 2022
Malware in azure-ai-document-translator-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-support-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-storsimple8000series-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-communication-phone-numbers-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in azure-arm-storagesync-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcemover-samples-js (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcegraph-samples-ts-beta (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcegraph-samples-js-beta (npm)
- Jun 20, 2022
Malware in azure-arm-resourcemover-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-storagesync-samples-js
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcegraph-samples-ts-beta
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcegraph-samples-js-beta
1 compromised version
- Jun 20, 2022
Malicious code in meliuz-card-google (npm)
- Jun 20, 2022
Malicious code in azure-arm-resourcemover-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-privatedns-samples-ts (npm)
- Jun 20, 2022
Malicious code in azure-arm-privatedns-samples-js (npm)
- Jun 20, 2022
Malware in meliuz-card-google
1 compromised version
- Jun 20, 2022
Malware in azure-arm-resourcemover-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-privatedns-samples-ts
1 compromised version
- Jun 20, 2022
Malware in azure-arm-privatedns-samples-js
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-prompt (npm)
- Jun 20, 2022
Malicious code in softomate-caa-module (npm)
- Jun 20, 2022
Malicious code in lib-feature-flags-js (npm)
- Jun 20, 2022
Malicious code in dx-osc-ui (npm)
- Jun 20, 2022
Malicious code in automated-end-to-end-tests (npm)
- Jun 20, 2022
Malware in dx-osc-ui
1 compromised version
- Jun 20, 2022
Malware in automated-end-to-end-tests
1 compromised version
- Jun 20, 2022
Malware in lib-feature-flags-js
1 compromised version
- Jun 20, 2022
Malware in voicemail-prompt
1 compromised version
- Jun 20, 2022
Malware in softomate-caa-module
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-notify (npm)
- Jun 20, 2022
Malicious code in voicemail-main-fsm (npm)
- Jun 20, 2022
Malicious code in voicemail-mailbox (npm)
Page 4919 of 4,963