Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,767 total in npm · sorted newest first- Jun 14, 2022
Malware in pagetour-sdk.http
1 compromised version
- Jun 14, 2022
Malware in storage-image-processing-api-functions
1 compromised version
- Jun 14, 2022
Malware in bindingx-weex-plugin
1 compromised version
- Jun 13, 2022
Malicious code in sp-bootstrap (npm)
- Jun 13, 2022
Malware in sp-bootstrap
1 compromised version
- Jun 13, 2022
Malicious code in vault-updater (npm)
- Jun 13, 2022
Malicious code in linkbubble-website (npm)
- Jun 13, 2022
Malicious code in link-bubble (npm)
- Jun 13, 2022
Malicious code in brave-research-participation-tool (npm)
- Jun 13, 2022
Malicious code in brave-ledger (npm)
- Jun 13, 2022
Malicious code in brave-ios (npm)
- Jun 13, 2022
Malicious code in brave-eyeshade (npm)
- Jun 13, 2022
Malicious code in brave-extension (npm)
- Jun 13, 2022
Malicious code in brave-core-crx-packager (npm)
- Jun 13, 2022
Malware in link-bubble
1 compromised version
- Jun 13, 2022
Malware in linkbubble-website
1 compromised version
- Jun 13, 2022
Malware in brave-ios
1 compromised version
- Jun 13, 2022
Malware in brave-extension
1 compromised version
- Jun 13, 2022
Malware in brave-ledger
1 compromised version
- Jun 13, 2022
Malware in brave-eyeshade
1 compromised version
- Jun 13, 2022
Malware in brave-research-participation-tool
1 compromised version
- Jun 13, 2022
Malware in vault-updater
1 compromised version
- Jun 13, 2022
Malware in brave-core-crx-packager
1 compromised version
- Jun 13, 2022
Malicious code in web-discovery-project (npm)
- Jun 13, 2022
Malicious code in brave-core (npm)
- Jun 13, 2022
Malicious code in brave-chromium-themes (npm)
- Jun 13, 2022
Malicious code in brave-bitgo-client (npm)
- Jun 13, 2022
Malware in brave-core
1 compromised version
- Jun 13, 2022
Malware in brave-chromium-themes
1 compromised version
- Jun 13, 2022
Malware in brave-bitgo-client
1 compromised version
- Jun 13, 2022
Malware in web-discovery-project
1 compromised version
- Jun 13, 2022
Malicious code in kubernetes-ui (npm)
- Jun 13, 2022
Malicious code in kubernetes-dashboard (npm)
- Jun 13, 2022
Malicious code in downloadkubernetes (npm)
- Jun 13, 2022
Malware in kubernetes-ui
1 compromised version
- Jun 13, 2022
Malware in kubernetes-dashboard
1 compromised version
- Jun 13, 2022
Malware in downloadkubernetes
1 compromised version
- Jun 13, 2022
Malicious code in aframe-vimeo-component (npm)
- Jun 13, 2022
Malicious code in vimeo_depth_player (npm)
- Jun 13, 2022
Malicious code in vimeo-threejs-player (npm)
- Jun 13, 2022
Malware in vimeo_depth_player
1 compromised version
- Jun 13, 2022
Malware in aframe-vimeo-component
1 compromised version
- Jun 13, 2022
Malware in vimeo-threejs-player
1 compromised version
- Jun 13, 2022
Malicious code in acronis-ui-kit (npm)
- Jun 13, 2022
Malware in acronis-ui-kit
1 compromised version
- Jun 13, 2022
Malicious code in @strava/clio (npm)
- Jun 13, 2022
Malware in @strava/clio
1 compromised version
- Jun 13, 2022
Malicious code in orion-web (npm)
- Jun 13, 2022
Malware in orion-web
1 compromised version
- Jun 13, 2022
Malicious code in rc-trigger-popup (npm)
Page 4941 of 4,956