Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
254,182 total in npm · sorted newest first- Jun 20, 2022
Malicious code in swisspost-intranet-header (npm)
- Jun 20, 2022
Malicious code in os-wallet-provider (npm)
- Jun 20, 2022
Malicious code in ghs-payments (npm)
- Jun 20, 2022
Malicious code in ethos-design-system (npm)
- Jun 20, 2022
Malicious code in cp874-utf8 (npm)
- Jun 20, 2022
Malware in swisspost-intranet-header
1 compromised version
- Jun 20, 2022
Malware in ghs-payments
1 compromised version
- Jun 20, 2022
Malware in ethos-design-system
1 compromised version
- Jun 20, 2022
Malware in os-wallet-provider
1 compromised version
- Jun 20, 2022
Malware in cp874-utf8
1 compromised version
- Jun 20, 2022
Malicious code in buffer-refresh (npm)
- Jun 20, 2022
Malicious code in buffer--leep (npm)
- Jun 20, 2022
Malicious code in async-problem (npm)
- Jun 20, 2022
Malware in buffer-refresh
1 compromised version
- Jun 20, 2022
Malware in buffer--leep
1 compromised version
- Jun 20, 2022
Malware in async-problem
1 compromised version
- Jun 20, 2022
Malicious code in goprocess (npm)
- Jun 20, 2022
Malware in goprocess
1 compromised version
- Jun 20, 2022
Malicious code in vvs-uikit (npm)
- Jun 20, 2022
Malicious code in vvs-eslint-config (npm)
- Jun 20, 2022
Malicious code in sal-stack-lwip (npm)
- Jun 20, 2022
Malicious code in move-analyzer (npm)
- Jun 20, 2022
Malware in sal-stack-lwip
1 compromised version
- Jun 20, 2022
Malware in move-analyzer
1 compromised version
- Jun 20, 2022
Malware in vvs-uikit
1 compromised version
- Jun 20, 2022
Malware in vvs-eslint-config
1 compromised version
- Jun 20, 2022
Malicious code in opera-toolkit (npm)
- Jun 20, 2022
Malicious code in jet-client (npm)
- Jun 20, 2022
Malicious code in identity-module-miniapp (npm)
- Jun 20, 2022
Malicious code in @infra-node/kconf (npm)
- Jun 20, 2022
Malware in @infra-node/kconf
1 compromised version
- Jun 20, 2022
Malware in identity-module-miniapp
1 compromised version
- Jun 20, 2022
Malware in opera-toolkit
1 compromised version
- Jun 20, 2022
Malware in jet-client
1 compromised version
- Jun 20, 2022
Malicious code in vizceral-component (npm)
- Jun 20, 2022
Malicious code in twilio-chat-console-webapp.js (npm)
- Jun 20, 2022
Malicious code in twilio-chat-console-webapp (npm)
- Jun 20, 2022
Malicious code in pseudo-loc-for-signin-widget (npm)
- Jun 20, 2022
Malware in pseudo-loc-for-signin-widget
1 compromised version
- Jun 20, 2022
Malware in vizceral-component
1 compromised version
- Jun 20, 2022
Malware in twilio-chat-console-webapp
1 compromised version
- Jun 20, 2022
Malware in twilio-chat-console-webapp.js
1 compromised version
- Jun 20, 2022
Malicious code in woofi_swap (npm)
- Jun 20, 2022
Malicious code in server_qa_automation (npm)
- Jun 20, 2022
Malicious code in pcatalogweb (npm)
- Jun 20, 2022
Malicious code in courage-for-signin-widget (npm)
- Jun 20, 2022
Malware in pcatalogweb
1 compromised version
- Jun 20, 2022
Malware in server_qa_automation
1 compromised version
- Jun 20, 2022
Malware in courage-for-signin-widget
1 compromised version
- Jun 20, 2022
Malware in woofi_swap
1 compromised version
Page 5009 of 5,084