Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
254,495 total in npm · sorted newest first- Jun 20, 2022
Malicious code in elasticagent (npm)
- Jun 20, 2022
Malware in elasticagent
1 compromised version
- Jun 20, 2022
Malware in affirmdev
1 compromised version
- Jun 20, 2022
Malware in magic.github.io
1 compromised version
- Jun 20, 2022
Malware in paywithaffirmtheme
1 compromised version
- Jun 20, 2022
Malware in elasticagent-linux-arm
1 compromised version
- Jun 20, 2022
Malicious code in ali-react-table-monorepo (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstashforwarder (npm)
- Jun 20, 2022
Malicious code in elasticsearch-logstash_reporter (npm)
- Jun 20, 2022
Malicious code in elasticagent-windows-arm (npm)
- Jun 20, 2022
Malware in elasticagent-windows-arm
1 compromised version
- Jun 20, 2022
Malware in ali-react-table-monorepo
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstashforwarder
1 compromised version
- Jun 20, 2022
Malware in elasticsearch-logstash_reporter
1 compromised version
- Jun 20, 2022
Malicious code in paypal-express (npm)
- Jun 20, 2022
Malicious code in myetherwallet-kb-v5 (npm)
- Jun 20, 2022
Malicious code in myetherwallet-kb (npm)
- Jun 20, 2022
Malicious code in logi-bootstrap (npm)
- Jun 20, 2022
Malware in myetherwallet-kb
1 compromised version
- Jun 20, 2022
Malware in paypal-express
1 compromised version
- Jun 20, 2022
Malware in logi-bootstrap
1 compromised version
- Jun 20, 2022
Malware in myetherwallet-kb-v5
1 compromised version
- Jun 20, 2022
Malicious code in universal-token (npm)
- Jun 20, 2022
Malicious code in pingone-angular-sdk (npm)
- Jun 20, 2022
Malicious code in microsoft-bonsai-visualizer (npm)
- Jun 20, 2022
Malicious code in ethers-4 (npm)
- Jun 20, 2022
Malware in pingone-angular-sdk
1 compromised version
- Jun 20, 2022
Malware in microsoft-bonsai-visualizer
1 compromised version
- Jun 20, 2022
Malware in ethers-4
1 compromised version
- Jun 20, 2022
Malware in universal-token
1 compromised version
- Jun 20, 2022
Malicious code in a11y-speak (npm)
- Jun 20, 2022
Malicious code in zilliqa-testing-library (npm)
- Jun 20, 2022
Malicious code in reactidd (npm)
- Jun 20, 2022
Malicious code in dns-watcher-frontend (npm)
- Jun 20, 2022
Malware in reactidd
1 compromised version
- Jun 20, 2022
Malware in zilliqa-testing-library
1 compromised version
- Jun 20, 2022
Malware in dns-watcher-frontend
1 compromised version
- Jun 20, 2022
Malware in a11y-speak
1 compromised version
- Jun 20, 2022
Malicious code in thisisnothelloworld (npm)
- Jun 20, 2022
Malicious code in solc-0.4.13 (npm)
- Jun 20, 2022
Malicious code in bitcoinjs-lib-bigint (npm)
- Jun 20, 2022
Malicious code in bip174-bigint (npm)
- Jun 20, 2022
Malware in bip174-bigint
1 compromised version
- Jun 20, 2022
Malware in thisisnothelloworld
1 compromised version
- Jun 20, 2022
Malware in solc-0.4.13
1 compromised version
- Jun 20, 2022
Malware in bitcoinjs-lib-bigint
1 compromised version
- Jun 20, 2022
Malicious code in gittt101 (npm)
- Jun 20, 2022
Malicious code in gitnpmrce (npm)
- Jun 20, 2022
Malicious code in githubnpmrce101 (npm)
- Jun 20, 2022
Malicious code in githubnpmrce1 (npm)
Page 4979 of 5,090