Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,947 total in npm · sorted newest first- Jun 20, 2022
Malicious code in tradermade-adapter (npm)
- Jun 20, 2022
Malware in trueusd-adapter
1 compromised version
- Jun 20, 2022
Malware in twelvedata-adapter
1 compromised version
- Jun 20, 2022
Malware in tradingeconomics-adapter
1 compromised version
- Jun 20, 2022
Malware in tradermade-adapter
1 compromised version
- Jun 20, 2022
Malicious code in token-allocation-adapter (npm)
- Jun 20, 2022
Malicious code in tiingo-adapter (npm)
- Jun 20, 2022
Malicious code in therundown-adapter (npm)
- Jun 20, 2022
Malicious code in terra-view-function-adapter (npm)
- Jun 20, 2022
Malicious code in taapi-adapter (npm)
- Jun 20, 2022
Malware in token-allocation-adapter
1 compromised version
- Jun 20, 2022
Malware in tiingo-adapter
1 compromised version
- Jun 20, 2022
Malware in taapi-adapter
1 compromised version
- Jun 20, 2022
Malware in therundown-adapter
1 compromised version
- Jun 20, 2022
Malware in terra-view-function-adapter
1 compromised version
- Jun 20, 2022
Malicious code in synthetix-debt-pool-adapter (npm)
- Jun 20, 2022
Malware in synthetix-debt-pool-adapter
1 compromised version
- Jun 20, 2022
Malicious code in stasis-adapter (npm)
- Jun 20, 2022
Malware in stasis-adapter
1 compromised version
- Jun 20, 2022
Malicious code in sportsdataio-adapter (npm)
- Jun 20, 2022
Malicious code in spectral-macro-score-adapter (npm)
- Jun 20, 2022
Malicious code in solana-view-function-adapter (npm)
- Jun 20, 2022
Malicious code in sochain-adapter (npm)
- Jun 20, 2022
Malware in spectral-macro-score-adapter
1 compromised version
- Jun 20, 2022
Malware in sportsdataio-adapter
1 compromised version
- Jun 20, 2022
Malware in solana-view-function-adapter
1 compromised version
- Jun 20, 2022
Malware in sochain-adapter
1 compromised version
- Jun 20, 2022
Malicious code in snowflake-adapter (npm)
- Jun 20, 2022
Malicious code in satoshitango-adapter (npm)
- Jun 20, 2022
Malicious code in renvm-address-set-adapter (npm)
- Jun 20, 2022
Malicious code in reduce-adapter (npm)
- Jun 20, 2022
Malware in renvm-address-set-adapter
1 compromised version
- Jun 20, 2022
Malware in reduce-adapter
1 compromised version
- Jun 20, 2022
Malware in snowflake-adapter
1 compromised version
- Jun 20, 2022
Malware in satoshitango-adapter
1 compromised version
- Jun 20, 2022
Malicious code in proof-of-reserves-adapter (npm)
- Jun 20, 2022
Malicious code in por-indexer-adapter (npm)
- Jun 20, 2022
Malicious code in polygon-adapter (npm)
- Jun 20, 2022
Malicious code in poa-adapter (npm)
- Jun 20, 2022
Malware in por-indexer-adapter
1 compromised version
- Jun 20, 2022
Malware in proof-of-reserves-adapter
1 compromised version
- Jun 20, 2022
Malware in polygon-adapter
1 compromised version
- Jun 20, 2022
Malware in poa-adapter
1 compromised version
- Jun 20, 2022
Malicious code in paypal-adapter (npm)
- Jun 20, 2022
Malicious code in paxos-adapter (npm)
- Jun 20, 2022
Malicious code in orchid-bandwidth-adapter (npm)
- Jun 20, 2022
Malicious code in openexchangerates-adapter (npm)
- Jun 20, 2022
Malicious code in onchain-gas-adapter (npm)
- Jun 20, 2022
Malware in paypal-adapter
1 compromised version
- Jun 20, 2022
Malware in onchain-gas-adapter
1 compromised version
Page 5019 of 5,079