Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,131 total in npm · sorted newest first- Jun 20, 2022
Malware in voicemail-notify
1 compromised version
- Jun 20, 2022
Malware in voicemail-mailbox
1 compromised version
- Jun 20, 2022
Malware in voicemail-main-fsm
1 compromised version
- Jun 20, 2022
Malicious code in voicemail-logging (npm)
- Jun 20, 2022
Malicious code in voicemail-fsm (npm)
- Jun 20, 2022
Malicious code in voicemail-data (npm)
- Jun 20, 2022
Malicious code in voicemail-config (npm)
- Jun 20, 2022
Malicious code in voicemail-auth (npm)
- Jun 20, 2022
Malware in voicemail-config
1 compromised version
- Jun 20, 2022
Malware in voicemail-fsm
1 compromised version
- Jun 20, 2022
Malware in voicemail-auth
1 compromised version
- Jun 20, 2022
Malware in voicemail-logging
1 compromised version
- Jun 20, 2022
Malware in voicemail-data
1 compromised version
- Jun 20, 2022
Malicious code in url-parser-native (npm)
- Jun 20, 2022
Malicious code in smithy-client (npm)
- Jun 20, 2022
Malicious code in protocol-http (npm)
- Jun 20, 2022
Malicious code in middleware-user-agent (npm)
- Jun 20, 2022
Malware in smithy-client
1 compromised version
- Jun 20, 2022
Malware in protocol-http
1 compromised version
- Jun 20, 2022
Malware in url-parser-native
1 compromised version
- Jun 20, 2022
Malware in middleware-user-agent
1 compromised version
- Jun 20, 2022
Malicious code in oas-nodegen (npm)
- Jun 20, 2022
Malicious code in node-config-provider (npm)
- Jun 20, 2022
Malicious code in mbed-connector (npm)
- Jun 20, 2022
Malicious code in ignored-package-pkg-a (npm)
- Jun 20, 2022
Malware in oas-nodegen
1 compromised version
- Jun 20, 2022
Malware in node-config-provider
1 compromised version
- Jun 20, 2022
Malware in mbed-connector
1 compromised version
- Jun 20, 2022
Malware in ignored-package-pkg-a
1 compromised version
- Jun 20, 2022
Malicious code in whistle-start (npm)
- Jun 20, 2022
Malicious code in matic-protocol (npm)
- Jun 20, 2022
Malicious code in iv-node-fetch (npm)
- Jun 20, 2022
Malicious code in iv-gtin-utils (npm)
- Jun 20, 2022
Malicious code in iv-build-utils (npm)
- Jun 20, 2022
Malware in matic-protocol
1 compromised version
- Jun 20, 2022
Malware in whistle-start
1 compromised version
- Jun 20, 2022
Malware in iv-gtin-utils
1 compromised version
- Jun 20, 2022
Malware in iv-node-fetch
1 compromised version
- Jun 20, 2022
Malware in iv-build-utils
1 compromised version
- Jun 20, 2022
Malicious code in iv-uv-latency (npm)
- Jun 20, 2022
Malicious code in iv-batcher (npm)
- Jun 20, 2022
Malicious code in iv-api-call-tracker (npm)
- Jun 20, 2022
Malware in iv-batcher
1 compromised version
- Jun 20, 2022
Malware in iv-api-call-tracker
1 compromised version
- Jun 20, 2022
Malware in iv-uv-latency
1 compromised version
- Jun 20, 2022
Malicious code in plhqjs (npm)
- Jun 20, 2022
Malicious code in playhq_net_jwplayer (npm)
- Jun 20, 2022
Malicious code in iv-api-utils (npm)
- Jun 20, 2022
Malicious code in @bynder-private/persistgraphql-webpack-plugin (npm)
- Jun 20, 2022
Malicious code in @bynder-private/dragula (npm)
Page 4920 of 4,963