Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,767 total in npm · sorted newest first- Jun 20, 2022
Malware in datadog-agent-github-action
1 compromised version
- Jun 20, 2022
Malware in 0x-fee-wrapper-contract
1 compromised version
- Jun 20, 2022
Malware in custom-pages-react-boilerplate
1 compromised version
- Jun 20, 2022
Malware in frontegg-template-app
1 compromised version
- Jun 20, 2022
Malware in intercom-react-native.podspec
1 compromised version
- Jun 20, 2022
Malware in sdk_repl_app
1 compromised version
- Jun 20, 2022
Malware in frontegg-angular
1 compromised version
- Jun 20, 2022
Malware in collection-events-discord-webhook
1 compromised version
- Jun 20, 2022
Malware in nft-tutorial
1 compromised version
- Jun 20, 2022
Malware in astrajs
1 compromised version
- Jun 20, 2022
Malware in metadata-api-nodejs
1 compromised version
- Jun 20, 2022
Malware in opensea-ships-log
1 compromised version
- Jun 20, 2022
Malware in action-prebuildify
1 compromised version
- Jun 20, 2022
Malware in pulsar-sink-docs
1 compromised version
- Jun 20, 2022
Malware in stargate-docs
1 compromised version
- Jun 20, 2022
Malware in pagespeed-server
1 compromised version
- Jun 20, 2022
Malware in datadog-app-sentiment
1 compromised version
- Jun 20, 2022
Malware in datadog-app-example-random-dog-dog-image-widget
1 compromised version
- Jun 20, 2022
Malware in cdcrep-docs
1 compromised version
- Jun 20, 2022
Malicious code in email-report (npm)
- Jun 20, 2022
Malicious code in cat-webcomponent-image (npm)
- Jun 20, 2022
Malicious code in cat-weather-widget (npm)
- Jun 20, 2022
Malware in cat-webcomponent-image
1 compromised version
- Jun 20, 2022
Malware in email-report
1 compromised version
- Jun 20, 2022
Malware in cat-weather-widget
1 compromised version
- Jun 15, 2022
Malicious code in @prescreen/distillery (npm)
- Jun 15, 2022
Malware in @prescreen/distillery
1 compromised version
- Jun 15, 2022
Malicious code in flame-vali (npm)
- Jun 15, 2022
Malware in flame-vali
1 compromised version
- Jun 14, 2022
Malicious code in ngllibmanager (npm)
- Jun 14, 2022
Malware in ngllibmanager
1 compromised version
- Jun 14, 2022
Malicious code in dig-tokens (npm)
- Jun 14, 2022
Malware in dig-tokens
1 compromised version
- Jun 14, 2022
Malicious code in analytika-analytika-utils (npm)
- Jun 14, 2022
Malware in analytika-analytika-utils
1 compromised version
- Jun 14, 2022
Malicious code in @tide-web-apps/global-environments (npm)
- Jun 14, 2022
Malware in @tide-web-apps/global-environments
1 compromised version
- Jun 14, 2022
Malicious code in du_npm_integ (npm)
- Jun 14, 2022
Malicious code in du_npm_inte (npm)
- Jun 14, 2022
Malware in du_npm_integ
1 compromised version
- Jun 14, 2022
Malware in du_npm_inte
1 compromised version
- Jun 14, 2022
Malicious code in purple_team_midway_3 (npm)
- Jun 14, 2022
Malicious code in purple_team_midway_2 (npm)
- Jun 14, 2022
Malicious code in purple_team_midway (npm)
- Jun 14, 2022
Malware in purple_team_midway_3
1 compromised version
- Jun 14, 2022
Malware in purple_team_midway_2
1 compromised version
- Jun 14, 2022
Malware in purple_team_midway
1 compromised version
- Jun 14, 2022
Malicious code in storage-image-processing-api-functions (npm)
- Jun 14, 2022
Malicious code in pagetour-sdk.http (npm)
- Jun 14, 2022
Malicious code in bindingx-weex-plugin (npm)
Page 4940 of 4,956