Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,947 total in npm · sorted newest first- Jun 20, 2022
Malicious code in blockchair-adapter (npm)
- Jun 20, 2022
Malicious code in blockchain.com-adapter (npm)
- Jun 20, 2022
Malicious code in bitso-adapter (npm)
- Jun 20, 2022
Malware in blockcypher-adapter
1 compromised version
- Jun 20, 2022
Malware in blockchair-adapter
1 compromised version
- Jun 20, 2022
Malware in blockchain.com-adapter
1 compromised version
- Jun 20, 2022
Malware in bitso-adapter
1 compromised version
- Jun 20, 2022
Malicious code in bitex-adapter (npm)
- Jun 20, 2022
Malicious code in bitcoin-json-rpc-adapter (npm)
- Jun 20, 2022
Malicious code in binance-dex-adapter (npm)
- Jun 20, 2022
Malicious code in binance-adapter (npm)
- Jun 20, 2022
Malware in binance-adapter
1 compromised version
- Jun 20, 2022
Malware in bitcoin-json-rpc-adapter
1 compromised version
- Jun 20, 2022
Malware in bitex-adapter
1 compromised version
- Jun 20, 2022
Malware in binance-dex-adapter
1 compromised version
- Jun 20, 2022
Malicious code in amberdata-adapter (npm)
- Jun 20, 2022
Malicious code in alpine-adapter (npm)
- Jun 20, 2022
Malicious code in bea-adapter (npm)
- Jun 20, 2022
Malicious code in ap-election-adapter (npm)
- Jun 20, 2022
Malicious code in anyblock-adapter (npm)
- Jun 20, 2022
Malware in alpine-adapter
1 compromised version
- Jun 20, 2022
Malware in anyblock-adapter
1 compromised version
- Jun 20, 2022
Malware in bea-adapter
1 compromised version
- Jun 20, 2022
Malware in ap-election-adapter
1 compromised version
- Jun 20, 2022
Malware in amberdata-adapter
1 compromised version
- Jun 20, 2022
Malicious code in alphavantage-adapter (npm)
- Jun 20, 2022
Malicious code in alphachain-adapter (npm)
- Jun 20, 2022
Malicious code in ada-balance-adapter (npm)
- Jun 20, 2022
Malware in alphavantage-adapter
1 compromised version
- Jun 20, 2022
Malware in ada-balance-adapter
1 compromised version
- Jun 20, 2022
Malware in alphachain-adapter
1 compromised version
- Jun 20, 2022
Malicious code in accuweather-adapter (npm)
- Jun 20, 2022
Malicious code in xbto-adapter (npm)
- Jun 20, 2022
Malicious code in sample-npm-balu (npm)
- Jun 20, 2022
Malicious code in 1forge-adapter (npm)
- Jun 20, 2022
Malware in xbto-adapter
1 compromised version
- Jun 20, 2022
Malware in sample-npm-balu
1 compromised version
- Jun 20, 2022
Malware in accuweather-adapter
1 compromised version
- Jun 20, 2022
Malware in 1forge-adapter
1 compromised version
- Jun 20, 2022
Malicious code in visualization-raphael-chart (npm)
- Jun 20, 2022
Malicious code in gapminder-offline (npm)
- Jun 20, 2022
Malicious code in discord.js-selfbot-v7 (npm)
- Jun 20, 2022
Malicious code in discord.js-selfbot-v32 (npm)
- Jun 20, 2022
Malware in gapminder-offline
1 compromised version
- Jun 20, 2022
Malware in discord.js-selfbot-v7
1 compromised version
- Jun 20, 2022
Malware in visualization-raphael-chart
1 compromised version
- Jun 20, 2022
Malware in discord.js-selfbot-v32
1 compromised version
- Jun 20, 2022
Malicious code in alprazolamdiv (npm)
- Jun 20, 2022
Malicious code in labrujha-cadas (npm)
- Jun 20, 2022
Malicious code in discord.js-selfbot-cloner (npm)
Page 5023 of 5,079