Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
254,501 total in npm · sorted newest first- Jun 20, 2022
Malware in multivalue-control-extension
1 compromised version
- Jun 20, 2022
Malware in loki-price
1 compromised version
- Jun 20, 2022
Malicious code in synobot (npm)
- Jun 20, 2022
Malicious code in octo-styleguide (npm)
- Jun 20, 2022
Malicious code in h98d (npm)
- Jun 20, 2022
Malicious code in eng-package-utils (npm)
- Jun 20, 2022
Malicious code in autorest-extension-base (npm)
- Jun 20, 2022
Malware in autorest-extension-base
1 compromised version
- Jun 20, 2022
Malware in octo-styleguide
1 compromised version
- Jun 20, 2022
Malware in synobot
1 compromised version
- Jun 20, 2022
Malware in h98d
1 compromised version
- Jun 20, 2022
Malware in eng-package-utils
1 compromised version
- Jun 20, 2022
Malicious code in uphold-transaction-sample (npm)
- Jun 20, 2022
Malicious code in uphold-client-credentials-oauth-sample (npm)
- Jun 20, 2022
Malicious code in uphold-authorization-code-oauth-sample (npm)
- Jun 20, 2022
Malicious code in avddeploy (npm)
- Jun 20, 2022
Malware in avddeploy
1 compromised version
- Jun 20, 2022
Malware in uphold-authorization-code-oauth-sample
1 compromised version
- Jun 20, 2022
Malware in uphold-transaction-sample
1 compromised version
- Jun 20, 2022
Malware in uphold-client-credentials-oauth-sample
1 compromised version
- Jun 20, 2022
Malicious code in upholdsdk (npm)
- Jun 20, 2022
Malicious code in uphold-pat-sample (npm)
- Jun 20, 2022
Malicious code in uphold-pat (npm)
- Jun 20, 2022
Malicious code in keychainswift (npm)
- Jun 20, 2022
Malware in uphold-pat
1 compromised version
- Jun 20, 2022
Malware in uphold-pat-sample
1 compromised version
- Jun 20, 2022
Malware in upholdsdk
1 compromised version
- Jun 20, 2022
Malware in keychainswift
1 compromised version
- Jun 20, 2022
Malicious code in uphold-transaction (npm)
- Jun 20, 2022
Malicious code in uphold-client-credentials-oauth (npm)
- Jun 20, 2022
Malicious code in uphold-authorization-code-oauth (npm)
- Jun 20, 2022
Malicious code in shopify-koa-app (npm)
- Jun 20, 2022
Malware in uphold-transaction
1 compromised version
- Jun 20, 2022
Malware in uphold-client-credentials-oauth
1 compromised version
- Jun 20, 2022
Malware in uphold-authorization-code-oauth
1 compromised version
- Jun 20, 2022
Malware in shopify-koa-app
1 compromised version
- Jun 20, 2022
Malicious code in airpal (npm)
- Jun 20, 2022
Malicious code in stripe-sample-checkout-with-multiple-locales (npm)
- Jun 20, 2022
Malicious code in shopify_supply (npm)
- Jun 20, 2022
Malicious code in scopely-mopub-aacebookaudiencenetwork-adapters (npm)
- Jun 20, 2022
Malware in shopify_supply
1 compromised version
- Jun 20, 2022
Malware in airpal
1 compromised version
- Jun 20, 2022
Malware in scopely-mopub-aacebookaudiencenetwork-adapters
1 compromised version
- Jun 20, 2022
Malware in stripe-sample-checkout-with-multiple-locales
1 compromised version
- Jun 20, 2022
Malicious code in affirmdev1 (npm)
- Jun 20, 2022
Malicious code in helium-pgbouncer (npm)
- Jun 20, 2022
Malicious code in helium-helios (npm)
- Jun 20, 2022
Malicious code in helium-constructor (npm)
- Jun 20, 2022
Malware in helium-helios
1 compromised version
- Jun 20, 2022
Malware in affirmdev1
1 compromised version
Page 4978 of 5,091