Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,675 total in npm · sorted newest first- Jun 9, 2022
Malware in calc_testing
1 compromised version
- Jun 9, 2022
Malware in bebekair
1 compromised version
- Jun 8, 2022
Malicious code in on-running-script-context (npm)
- Jun 8, 2022
Malware in on-running-script-context
1 compromised version
- Jun 8, 2022
Malicious code in angieslist-visitor-app-common (npm)
- Jun 8, 2022
Malware in angieslist-visitor-app-common
1 compromised version
- Jun 8, 2022
Malicious code in ai-aws-manager (npm)
- Jun 8, 2022
Malicious code in zrc2-wallet-zilliqa (npm)
- Jun 8, 2022
Malicious code in zilliqa-token-contract (npm)
- Jun 8, 2022
Malicious code in zilliqa-social-pay (npm)
- Jun 8, 2022
Malicious code in zilliqa-exchange-tutorial (npm)
- Jun 8, 2022
Malicious code in z-wallet (npm)
- Jun 8, 2022
Malicious code in tangerine-state-viewer (npm)
- Jun 8, 2022
Malicious code in scilla-server (npm)
- Jun 8, 2022
Malicious code in scilla (npm)
- Jun 8, 2022
Malicious code in nucleus-wallet (npm)
- Jun 8, 2022
Malicious code in neo-savant (npm)
- Jun 8, 2022
Malicious code in multisig (npm)
- Jun 8, 2022
Malicious code in misk-webadmin (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-web-actions (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-template-basic (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-database (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-config (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-app (npm)
- Jun 8, 2022
Malicious code in misk-web-tab-admin-dashboard (npm)
- Jun 8, 2022
Malicious code in misk-web-docs (npm)
- Jun 8, 2022
Malicious code in kruit (npm)
- Jun 8, 2022
Malware in misk-web-tab-admin-dashboard
1 compromised version
- Jun 8, 2022
Malware in multisig
1 compromised version
- Jun 8, 2022
Malware in misk-web-tab-database
1 compromised version
- Jun 8, 2022
Malware in zilliqa-token-contract
1 compromised version
- Jun 8, 2022
Malware in zrc2-wallet-zilliqa
1 compromised version
- Jun 8, 2022
Malware in misk-webadmin
1 compromised version
- Jun 8, 2022
Malware in tangerine-state-viewer
1 compromised version
- Jun 8, 2022
Malware in zilliqa-exchange-tutorial
1 compromised version
- Jun 8, 2022
Malware in misk-web-tab-app
1 compromised version
- Jun 8, 2022
Malware in kruit
1 compromised version
- Jun 8, 2022
Malware in zilliqa-social-pay
1 compromised version
- Jun 8, 2022
Malware in misk-web-tab-web-actions
1 compromised version
- Jun 8, 2022
Malware in misk-web-tab-template-basic
1 compromised version
- Jun 8, 2022
Malware in misk-web-tab-config
1 compromised version
- Jun 8, 2022
Malware in ai-aws-manager
1 compromised version
- Jun 8, 2022
Malware in neo-savant
1 compromised version
- Jun 8, 2022
Malware in misk-web-docs
1 compromised version
- Jun 8, 2022
Malware in scilla
1 compromised version
- Jun 8, 2022
Malware in z-wallet
1 compromised version
- Jun 8, 2022
Malware in nucleus-wallet
1 compromised version
- Jun 8, 2022
Malware in scilla-server
1 compromised version
- Jun 8, 2022
Malicious code in ai-cluster-manager (npm)
- Jun 8, 2022
Malicious code in vt-blockchain-bootcamp-starter-frontend (npm)
Page 4942 of 4,954