Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
254,215 total in npm · sorted newest first- Jun 20, 2022
Malware in free-free-fire-diamonsd-genrator-2022
1 compromised version
- Jun 20, 2022
Malware in pokemon-go-promo-codes-app-apk
1 compromised version
- Jun 20, 2022
Malware in free-fire-hac-k-app-donwload-2022
1 compromised version
- Jun 20, 2022
Malicious code in free-fortnite-skins-no-human-verification-2022 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-codes-xbox-pc-switch-2022 (npm)
- Jun 20, 2022
Malicious code in free-fire-skins-app-donwload-2022 (npm)
- Jun 20, 2022
Malicious code in free-fire-hakc-donwload-tool-2022 (npm)
- Jun 20, 2022
Malware in free-fortnite-skins-codes-xbox-pc-switch-2022
1 compromised version
- Jun 20, 2022
Malware in free-fire-hakc-donwload-tool-2022
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-no-human-verification-2022
1 compromised version
- Jun 20, 2022
Malware in free-fire-skins-app-donwload-2022
1 compromised version
- Jun 20, 2022
Malicious code in free-robux-no-human-verification-2022 (npm)
- Jun 20, 2022
Malicious code in free-robux-app-ios (npm)
- Jun 20, 2022
Malicious code in free-robux-2022 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-wildcat-skin-codes-2022 (npm)
- Jun 20, 2022
Malware in free-robux-2022
1 compromised version
- Jun 20, 2022
Malware in free-robux-app-ios
1 compromised version
- Jun 20, 2022
Malware in free-robux-no-human-verification-2022
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-wildcat-skin-codes-2022
1 compromised version
- Jun 20, 2022
Malicious code in free-fortnite-skins-easy (npm)
- Jun 20, 2022
Malicious code in free-fortnite-accounts-2022 (npm)
- Jun 20, 2022
Malicious code in comment-gagner-de-l-argent-sur-cashapp (npm)
- Jun 20, 2022
Malicious code in cash-app-argent-gratuit-2022 (npm)
- Jun 20, 2022
Malware in comment-gagner-de-l-argent-sur-cashapp
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-accounts-2022
1 compromised version
- Jun 20, 2022
Malware in cash-app-argent-gratuit-2022
1 compromised version
- Jun 20, 2022
Malware in free-fortnite-skins-easy
1 compromised version
- Jun 20, 2022
Malicious code in free-vbucks-app-ps4 (npm)
- Jun 20, 2022
Malicious code in free-tiktok-followers-app-2022 (npm)
- Jun 20, 2022
Malicious code in free-tiktok-fans-app-2022 (npm)
- Jun 20, 2022
Malicious code in fortnite-free-vbucks-2022 (npm)
- Jun 20, 2022
Malware in free-tiktok-fans-app-2022
1 compromised version
- Jun 20, 2022
Malware in free-vbucks-app-ps4
1 compromised version
- Jun 20, 2022
Malware in free-tiktok-followers-app-2022
1 compromised version
- Jun 20, 2022
Malware in fortnite-free-vbucks-2022
1 compromised version
- Jun 20, 2022
Malicious code in garena-free-fire-skin-2022 (npm)
- Jun 20, 2022
Malicious code in free-fire-redeem-code-2022 (npm)
- Jun 20, 2022
Malicious code in ferwtr (npm)
- Jun 20, 2022
Malicious code in cdd22 (npm)
- Jun 20, 2022
Malware in ferwtr
1 compromised version
- Jun 20, 2022
Malware in garena-free-fire-skin-2022
1 compromised version
- Jun 20, 2022
Malware in free-fire-redeem-code-2022
1 compromised version
- Jun 20, 2022
Malware in cdd22
1 compromised version
- Jun 20, 2022
Malicious code in sdfere (npm)
- Jun 20, 2022
Malicious code in free-pokemon-go-coin-2022-new-pogo-coins (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-app-ps4 (npm)
- Jun 20, 2022
Malicious code in free-fortnite-skins-2022 (npm)
- Jun 20, 2022
Malicious code in ddf2rf (npm)
- Jun 20, 2022
Malware in ddf2rf
1 compromised version
- Jun 20, 2022
Malware in sdfere
1 compromised version
Page 5007 of 5,085