Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
248,005 total in npm · sorted newest first- Jun 20, 2022
Malware in exjswrtrilypbhn
1 compromised version
- Jun 20, 2022
Malware in bcp-ui
1 compromised version
- Jun 20, 2022
Malware in dcihaockmzqwwof
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.mathematics (npm)
- Jun 20, 2022
Malicious code in com.unity.editorcoroutines (npm)
- Jun 20, 2022
Malware in com.unity.editorcoroutines
1 compromised version
- Jun 20, 2022
Malware in com.unity.mathematics
1 compromised version
- Jun 20, 2022
Malicious code in com.unity.modules.uielementsnative (npm)
- Jun 20, 2022
Malicious code in com.unity.modules.subsystems (npm)
- Jun 20, 2022
Malicious code in com.unity.burst (npm)
- Jun 20, 2022
Malware in com.unity.modules.uielementsnative
1 compromised version
- Jun 20, 2022
Malware in com.unity.burst
1 compromised version
- Jun 20, 2022
Malware in com.unity.modules.subsystems
1 compromised version
- Jun 20, 2022
Malicious code in colors-helper (npm)
- Jun 20, 2022
Malicious code in colors-help (npm)
- Jun 20, 2022
Malware in colors-helper
1 compromised version
- Jun 20, 2022
Malware in colors-help
1 compromised version
- Jun 20, 2022
Malicious code in agoric-servers (npm)
- Jun 20, 2022
Malicious code in upgrade-challenge (npm)
- Jun 20, 2022
Malicious code in npm-mega (npm)
- Jun 20, 2022
Malicious code in megamanz07007 (npm)
- Jun 20, 2022
Malicious code in megaman0072 (npm)
- Jun 20, 2022
Malicious code in helix-status-service (npm)
- Jun 20, 2022
Malicious code in helix-slack-notification (npm)
- Jun 20, 2022
Malicious code in helix-run-query (npm)
- Jun 20, 2022
Malicious code in helix-contentsource-connector (npm)
- Jun 20, 2022
Malicious code in git-dependency-maker (npm)
- Jun 20, 2022
Malicious code in dapp-inter-ui (npm)
- Jun 20, 2022
Malicious code in dapp-inter-agservers (npm)
- Jun 20, 2022
Malicious code in dapp-inter (npm)
- Jun 20, 2022
Malicious code in ashion-ingest (npm)
- Jun 20, 2022
Malware in ashion-ingest
1 compromised version
- Jun 20, 2022
Malware in megaman0072
1 compromised version
- Jun 20, 2022
Malware in git-dependency-maker
1 compromised version
- Jun 20, 2022
Malware in helix-status-service
1 compromised version
- Jun 20, 2022
Malware in dapp-inter
1 compromised version
- Jun 20, 2022
Malware in dapp-inter-ui
1 compromised version
- Jun 20, 2022
Malware in upgrade-challenge
1 compromised version
- Jun 20, 2022
Malware in agoric-servers
1 compromised version
- Jun 20, 2022
Malware in helix-run-query
1 compromised version
- Jun 20, 2022
Malware in npm-mega
1 compromised version
- Jun 20, 2022
Malware in dapp-inter-agservers
1 compromised version
- Jun 20, 2022
Malware in helix-slack-notification
1 compromised version
- Jun 20, 2022
Malware in megamanz07007
1 compromised version
- Jun 20, 2022
Malware in helix-contentsource-connector
1 compromised version
- Jun 20, 2022
Malicious code in action-publish-gh-pages (npm)
- Jun 20, 2022
Malicious code in action-create-release-pr (npm)
- Jun 20, 2022
Malicious code in webpack-vue-config (npm)
- Jun 20, 2022
Malicious code in ui-extensions-dev-console-app (npm)
- Jun 20, 2022
Malicious code in typescript-snap (npm)
Page 4938 of 4,961