Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,947 total in npm · sorted newest first- Jun 20, 2022
Malicious code in deribit-adapter (npm)
- Jun 20, 2022
Malicious code in curve-adapter (npm)
- Jun 20, 2022
Malicious code in currencylayer-adapter (npm)
- Jun 20, 2022
Malware in dns-query-adapter
1 compromised version
- Jun 20, 2022
Malware in curve-adapter
1 compromised version
- Jun 20, 2022
Malware in deribit-adapter
1 compromised version
- Jun 20, 2022
Malware in currencylayer-adapter
1 compromised version
- Jun 20, 2022
Malicious code in cryptomkt-adapter (npm)
- Jun 20, 2022
Malicious code in cryptoid-adapter (npm)
- Jun 20, 2022
Malicious code in cryptocompare-adapter (npm)
- Jun 20, 2022
Malicious code in cryptoapis-v2-adapter (npm)
- Jun 20, 2022
Malware in cryptocompare-adapter
1 compromised version
- Jun 20, 2022
Malware in cryptoapis-v2-adapter
1 compromised version
- Jun 20, 2022
Malware in cryptomkt-adapter
1 compromised version
- Jun 20, 2022
Malware in cryptoid-adapter
1 compromised version
- Jun 20, 2022
Malicious code in cryptoapis-adapter (npm)
- Jun 20, 2022
Malicious code in covid-tracker-adapter (npm)
- Jun 20, 2022
Malicious code in coinranking-adapter (npm)
- Jun 20, 2022
Malicious code in coinpaprika-adapter (npm)
- Jun 20, 2022
Malware in covid-tracker-adapter
1 compromised version
- Jun 20, 2022
Malware in coinpaprika-adapter
1 compromised version
- Jun 20, 2022
Malware in coinranking-adapter
1 compromised version
- Jun 20, 2022
Malware in cryptoapis-adapter
1 compromised version
- Jun 20, 2022
Malicious code in coinmetrics-adapter (npm)
- Jun 20, 2022
Malicious code in coinmarketcap-adapter (npm)
- Jun 20, 2022
Malicious code in coinlore-adapter (npm)
- Jun 20, 2022
Malicious code in coingecko-adapter (npm)
- Jun 20, 2022
Malicious code in coincodex-adapter (npm)
- Jun 20, 2022
Malware in coingecko-adapter
1 compromised version
- Jun 20, 2022
Malware in coinmarketcap-adapter
1 compromised version
- Jun 20, 2022
Malware in coincodex-adapter
1 compromised version
- Jun 20, 2022
Malware in coinmetrics-adapter
1 compromised version
- Jun 20, 2022
Malware in coinlore-adapter
1 compromised version
- Jun 20, 2022
Malicious code in coinbase-adapter (npm)
- Jun 20, 2022
Malicious code in coinapi-adapter (npm)
- Jun 20, 2022
Malicious code in chain-reserve-wallet-adapter (npm)
- Jun 20, 2022
Malicious code in cfbenchmarks-adapter (npm)
- Jun 20, 2022
Malware in chain-reserve-wallet-adapter
1 compromised version
- Jun 20, 2022
Malware in coinapi-adapter
1 compromised version
- Jun 20, 2022
Malware in coinbase-adapter
1 compromised version
- Jun 20, 2022
Malware in cfbenchmarks-adapter
1 compromised version
- Jun 20, 2022
Malicious code in cache.gold-adapter (npm)
- Jun 20, 2022
Malicious code in btc.com-adapter (npm)
- Jun 20, 2022
Malicious code in bravenewcoin-adapter (npm)
- Jun 20, 2022
Malicious code in blockstream-adapter (npm)
- Jun 20, 2022
Malware in btc.com-adapter
1 compromised version
- Jun 20, 2022
Malware in bravenewcoin-adapter
1 compromised version
- Jun 20, 2022
Malware in cache.gold-adapter
1 compromised version
- Jun 20, 2022
Malware in blockstream-adapter
1 compromised version
- Jun 20, 2022
Malicious code in blockcypher-adapter (npm)
Page 5022 of 5,079