Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,005 total in npm · sorted newest first- Jun 20, 2022
Malicious code in @honeywell/fetlife-assets (npm)
- Jun 20, 2022
Malware in @huji/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @hudapp/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @honeywell/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @ibb-apache/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @homebrew/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @hilcorp/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @gmelius/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @globes/fetlife-assets (npm)
- Jun 20, 2022
Malware in @homebrew/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @globes/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @gmelius/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @hilcorp/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @glencore/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @gener8/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @gartner/fetlife-assets (npm)
- Jun 20, 2022
Malware in @gener8/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @glencore/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @gartner/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @gapinc/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @freqtrade/fetlife-assets (npm)
- Jun 20, 2022
Malware in @gapinc/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @freqtrade/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @flameshot/fetlife-assets (npm)
- Jun 20, 2022
Malware in @flameshot/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @flameshot-org/fetlife-assets (npm)
- Jun 20, 2022
Malware in @flameshot-org/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @firecracker-microvm/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @fetlife/fetlife-assets (npm)
- Jun 20, 2022
Malware in @firecracker-microvm/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @fetlife/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @exxonmobil/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @exor/fetlife-assets (npm)
- Jun 20, 2022
Malware in @exxonmobil/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @exor/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @exeloncorp/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @espn-lazysizes/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @espn/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @eset/fetlife-assets (npm)
- Jun 20, 2022
Malware in @exeloncorp/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @espn-lazysizes/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @espn/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @eset/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @edwardjones/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @dropcontact/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @dropbox/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @drive2/fetlife-assets (npm)
- Jun 20, 2022
Malware in @dropbox/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @dropcontact/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @drive2/fetlife-assets
1 compromised version
Page 4935 of 4,961