Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,947 total in npm · sorted newest first- Jun 20, 2022
Malware in paxos-adapter
1 compromised version
- Jun 20, 2022
Malware in openexchangerates-adapter
1 compromised version
- Jun 20, 2022
Malware in orchid-bandwidth-adapter
1 compromised version
- Jun 20, 2022
Malicious code in oilpriceapi-adapter (npm)
- Jun 20, 2022
Malicious code in nomics-adapter (npm)
- Jun 20, 2022
Malicious code in nikkei-adapter (npm)
- Jun 20, 2022
Malicious code in ncfx-adapter (npm)
- Jun 20, 2022
Malware in nomics-adapter
1 compromised version
- Jun 20, 2022
Malware in nikkei-adapter
1 compromised version
- Jun 20, 2022
Malware in oilpriceapi-adapter
1 compromised version
- Jun 20, 2022
Malware in ncfx-adapter
1 compromised version
- Jun 20, 2022
Malicious code in mycryptoapi-adapter (npm)
- Jun 20, 2022
Malicious code in mock-ea-adapter (npm)
- Jun 20, 2022
Malicious code in metalsapi-adapter (npm)
- Jun 20, 2022
Malicious code in messari-adapter (npm)
- Jun 20, 2022
Malware in messari-adapter
1 compromised version
- Jun 20, 2022
Malware in mycryptoapi-adapter
1 compromised version
- Jun 20, 2022
Malware in metalsapi-adapter
1 compromised version
- Jun 20, 2022
Malware in mock-ea-adapter
1 compromised version
- Jun 20, 2022
Malicious code in marketstack-adapter (npm)
- Jun 20, 2022
Malicious code in lotus-adapter (npm)
- Jun 20, 2022
Malicious code in lition-adapter (npm)
- Jun 20, 2022
Malicious code in linkpool-adapter (npm)
- Jun 20, 2022
Malware in lition-adapter
1 compromised version
- Jun 20, 2022
Malware in linkpool-adapter
1 compromised version
- Jun 20, 2022
Malware in marketstack-adapter
1 compromised version
- Jun 20, 2022
Malware in lotus-adapter
1 compromised version
- Jun 20, 2022
Malicious code in lcx-adapter (npm)
- Jun 20, 2022
Malicious code in layer2-sequencer-health-adapter (npm)
- Jun 20, 2022
Malicious code in kaiko-adapter (npm)
- Jun 20, 2022
Malware in layer2-sequencer-health-adapter
1 compromised version
- Jun 20, 2022
Malware in lcx-adapter
1 compromised version
- Jun 20, 2022
Malware in kaiko-adapter
1 compromised version
- Jun 20, 2022
Malicious code in json-rpc-adapter (npm)
- Jun 20, 2022
Malicious code in jpegd-adapter (npm)
- Jun 20, 2022
Malicious code in ipfs-adapter (npm)
- Jun 20, 2022
Malicious code in intrinio-adapter (npm)
- Jun 20, 2022
Malware in jpegd-adapter
1 compromised version
- Jun 20, 2022
Malware in intrinio-adapter
1 compromised version
- Jun 20, 2022
Malware in json-rpc-adapter
1 compromised version
- Jun 20, 2022
Malware in ipfs-adapter
1 compromised version
- Jun 20, 2022
Malicious code in iex-cloud-adapter (npm)
- Jun 20, 2022
Malicious code in gramchain-adapter (npm)
- Jun 20, 2022
Malicious code in google-bigquery-adapter (npm)
- Jun 20, 2022
Malicious code in geodb-adapter (npm)
- Jun 20, 2022
Malware in geodb-adapter
1 compromised version
- Jun 20, 2022
Malware in gramchain-adapter
1 compromised version
- Jun 20, 2022
Malware in iex-cloud-adapter
1 compromised version
- Jun 20, 2022
Malware in google-bigquery-adapter
1 compromised version
- Jun 20, 2022
Malicious code in genesis-volatility-adapter (npm)
Page 5020 of 5,079