Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
247,637 total in npm · sorted newest first- May 31, 2022
Malware in flipper-frontend-core
1 compromised version
- May 31, 2022
Malware in coolqueue.io
1 compromised version
- May 31, 2022
Malware in react-video-live-demo
1 compromised version
- May 31, 2022
Malicious code in amber-blocks (npm)
- May 31, 2022
Malicious code in volgactf (npm)
- May 31, 2022
Malware in amber-blocks
1 compromised version
- May 31, 2022
Malware in volgactf
1 compromised version
- May 31, 2022
Malicious code in @logistics-frontend/types (npm)
- May 31, 2022
Malicious code in @logistics-frontend/polyfills (npm)
- May 31, 2022
Malicious code in @logistics-frontend/ndd (npm)
- May 31, 2022
Malicious code in @logistics-frontend/modules (npm)
- May 31, 2022
Malicious code in @logistics-frontend/hooks (npm)
- May 31, 2022
Malicious code in @logistics-frontend/core (npm)
- May 31, 2022
Malware in @logistics-frontend/hooks
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/ndd
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/polyfills
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/modules
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/core
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/types
1 compromised version
- May 31, 2022
Malicious code in @logistics-frontend/utils (npm)
- May 31, 2022
Malicious code in @logistics-frontend/ui-old (npm)
- May 31, 2022
Malicious code in @logistics-frontend/client-core (npm)
- May 31, 2022
Malicious code in @logistics-frontend/blocks (npm)
- May 31, 2022
Malware in @logistics-frontend/ui-old
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/utils
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/client-core
1 compromised version
- May 31, 2022
Malware in @logistics-frontend/blocks
1 compromised version
- May 31, 2022
Malicious code in dragox-utilities (npm)
- May 31, 2022
Malware in dragox-utilities
1 compromised version
- May 31, 2022
Malicious code in colors_express (npm)
- May 31, 2022
Malware in colors_express
1 compromised version
- May 23, 2022
Malicious code in @kibt/weblogger (npm)
- May 23, 2022
Malicious code in @kibt/operation-track (npm)
- May 23, 2022
Malware in @kibt/weblogger
1 compromised version
- May 23, 2022
Malware in @kibt/operation-track
1 compromised version
- May 19, 2022
Malicious code in mollie-design-system (npm)
- May 19, 2022
Malicious code in dgse-tools-mgm-elf-helper (npm)
- May 19, 2022
Malicious code in ddc-new-relic (npm)
- May 19, 2022
Malicious code in ddc-classnames-js (npm)
- May 19, 2022
Malicious code in axp-utility-belt (npm)
- May 19, 2022
Malicious code in axp-shared-scripts (npm)
- May 19, 2022
Malicious code in axp-base (npm)
- May 19, 2022
Malware in axp-utility-belt
1 compromised version
- May 19, 2022
Malware in ddc-new-relic
1 compromised version
- May 19, 2022
Malware in axp-shared-scripts
1 compromised version
- May 19, 2022
Malware in dgse-tools-mgm-elf-helper
1 compromised version
- May 19, 2022
Malware in mollie-design-system
1 compromised version
- May 19, 2022
Malware in ddc-classnames-js
1 compromised version
- May 19, 2022
Malware in axp-base
1 compromised version
- May 19, 2022
Malicious code in website-404-error-page (npm)
Page 4949 of 4,953