Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,947 total in npm · sorted newest first- Jun 20, 2022
Malicious code in gemini-adapter (npm)
- Jun 20, 2022
Malicious code in gauntlet-terra (npm)
- Jun 20, 2022
Malicious code in gauntlet-solana-contracts (npm)
- Jun 20, 2022
Malware in gauntlet-terra
1 compromised version
- Jun 20, 2022
Malware in genesis-volatility-adapter
1 compromised version
- Jun 20, 2022
Malware in gemini-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-solana-contracts
1 compromised version
- Jun 20, 2022
Malicious code in gauntlet-solana (npm)
- Jun 20, 2022
Malicious code in gauntlet-core (npm)
- Jun 20, 2022
Malicious code in fmpcloud-adapter (npm)
- Jun 20, 2022
Malicious code in flightaware-adapter (npm)
- Jun 20, 2022
Malicious code in fixer-adapter (npm)
- Jun 20, 2022
Malware in flightaware-adapter
1 compromised version
- Jun 20, 2022
Malware in fmpcloud-adapter
1 compromised version
- Jun 20, 2022
Malware in fixer-adapter
1 compromised version
- Jun 20, 2022
Malware in gauntlet-core
1 compromised version
- Jun 20, 2022
Malware in gauntlet-solana
1 compromised version
- Jun 20, 2022
Malicious code in finage-adapter (npm)
- Jun 20, 2022
Malicious code in expert-car-broker-adapter (npm)
- Jun 20, 2022
Malicious code in ethgaswatch-adapter (npm)
- Jun 20, 2022
Malware in finage-adapter
1 compromised version
- Jun 20, 2022
Malware in ethgaswatch-adapter
1 compromised version
- Jun 20, 2022
Malware in expert-car-broker-adapter
1 compromised version
- Jun 20, 2022
Malicious code in ethgasstation-adapter (npm)
- Jun 20, 2022
Malicious code in etherscan-adapter (npm)
- Jun 20, 2022
Malicious code in etherchain-adapter (npm)
- Jun 20, 2022
Malicious code in eth-balance-adapter (npm)
- Jun 20, 2022
Malicious code in eodhistoricaldata-adapter (npm)
- Jun 20, 2022
Malware in eth-balance-adapter
1 compromised version
- Jun 20, 2022
Malware in etherscan-adapter
1 compromised version
- Jun 20, 2022
Malware in eodhistoricaldata-adapter
1 compromised version
- Jun 20, 2022
Malware in etherchain-adapter
1 compromised version
- Jun 20, 2022
Malware in ethgasstation-adapter
1 compromised version
- Jun 20, 2022
Malicious code in enzyme-adapter (npm)
- Jun 20, 2022
Malicious code in ea-test-helpers (npm)
- Jun 20, 2022
Malicious code in ea-reference-data-reader (npm)
- Jun 20, 2022
Malicious code in ea-factories (npm)
- Jun 20, 2022
Malware in ea-reference-data-reader
1 compromised version
- Jun 20, 2022
Malware in ea-test-helpers
1 compromised version
- Jun 20, 2022
Malware in enzyme-adapter
1 compromised version
- Jun 20, 2022
Malware in ea-factories
1 compromised version
- Jun 20, 2022
Malicious code in dxfeed-secondary-adapter (npm)
- Jun 20, 2022
Malicious code in dxfeed-adapter (npm)
- Jun 20, 2022
Malicious code in dwolla-adapter (npm)
- Jun 20, 2022
Malicious code in durin-adapter (npm)
- Jun 20, 2022
Malware in dxfeed-secondary-adapter
1 compromised version
- Jun 20, 2022
Malware in dxfeed-adapter
1 compromised version
- Jun 20, 2022
Malware in durin-adapter
1 compromised version
- Jun 20, 2022
Malware in dwolla-adapter
1 compromised version
- Jun 20, 2022
Malicious code in dns-query-adapter (npm)
Page 5021 of 5,079