Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
254,479 total in npm · sorted newest first- Jun 20, 2022
Malware in keyvault-keys
1 compromised version
- Jun 20, 2022
Malware in azure-communication-network-traversal
1 compromised version
- Jun 20, 2022
Malicious code in azure-storage-queue (npm)
- Jun 20, 2022
Malicious code in azure-storage-file-share (npm)
- Jun 20, 2022
Malicious code in azure-storage-blob-changefeed (npm)
- Jun 20, 2022
Malicious code in azure-mock-hub (npm)
- Jun 20, 2022
Malicious code in azure-identity (npm)
- Jun 20, 2022
Malware in azure-storage-file-share
1 compromised version
- Jun 20, 2022
Malware in azure-storage-blob-changefeed
1 compromised version
- Jun 20, 2022
Malware in azure-storage-queue
1 compromised version
- Jun 20, 2022
Malware in azure-mock-hub
1 compromised version
- Jun 20, 2022
Malware in azure-identity
1 compromised version
- Jun 20, 2022
Malicious code in cors-typescript-server (npm)
- Jun 20, 2022
Malicious code in cors-typescript-client (npm)
- Jun 20, 2022
Malicious code in azure-storage-file-datalake (npm)
- Jun 20, 2022
Malicious code in azure-storage-blob (npm)
- Jun 20, 2022
Malware in cors-typescript-client
1 compromised version
- Jun 20, 2022
Malware in cors-typescript-server
1 compromised version
- Jun 20, 2022
Malware in azure-storage-file-datalake
1 compromised version
- Jun 20, 2022
Malware in azure-storage-blob
1 compromised version
- Jun 20, 2022
Malicious code in perf-keyvault-keys (npm)
- Jun 20, 2022
Malicious code in perf-keyvault-certificates (npm)
- Jun 20, 2022
Malicious code in perf-data-tables (npm)
- Jun 20, 2022
Malicious code in perf-ai-text-analytics (npm)
- Jun 20, 2022
Malware in perf-ai-text-analytics
1 compromised version
- Jun 20, 2022
Malware in perf-keyvault-keys
1 compromised version
- Jun 20, 2022
Malware in perf-keyvault-certificates
1 compromised version
- Jun 20, 2022
Malware in perf-data-tables
1 compromised version
- Jun 20, 2022
Malicious code in perf-keyvault-secrets (npm)
- Jun 20, 2022
Malicious code in perf-identity (npm)
- Jun 20, 2022
Malicious code in perf-eventgrid (npm)
- Jun 20, 2022
Malicious code in perf-ai-form-recognizer (npm)
- Jun 20, 2022
Malware in perf-eventgrid
1 compromised version
- Jun 20, 2022
Malware in perf-identity
1 compromised version
- Jun 20, 2022
Malware in perf-ai-form-recognizer
1 compromised version
- Jun 20, 2022
Malware in perf-keyvault-secrets
1 compromised version
- Jun 20, 2022
Malicious code in perf-template (npm)
- Jun 20, 2022
Malicious code in perf-service-bus-track-1 (npm)
- Jun 20, 2022
Malicious code in perf-service-bus (npm)
- Jun 20, 2022
Malicious code in perf-container-registry (npm)
- Jun 20, 2022
Malicious code in perf-app-configuration (npm)
- Jun 20, 2022
Malware in perf-app-configuration
1 compromised version
- Jun 20, 2022
Malware in perf-service-bus
1 compromised version
- Jun 20, 2022
Malware in perf-service-bus-track-1
1 compromised version
- Jun 20, 2022
Malware in perf-container-registry
1 compromised version
- Jun 20, 2022
Malware in perf-template
1 compromised version
- Jun 20, 2022
Malicious code in perf-search-documents (npm)
- Jun 20, 2022
Malicious code in perf-event-hubs (npm)
- Jun 20, 2022
Malicious code in perf-ai-metrics-advisor (npm)
- Jun 20, 2022
Malicious code in azure-quantum-jobs (npm)
Page 4991 of 5,090