Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malicious code in @firecracker-microvm/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @fetlife/fetlife-assets (npm)
- Jun 20, 2022
Malware in @firecracker-microvm/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @fetlife/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @exxonmobil/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @exor/fetlife-assets (npm)
- Jun 20, 2022
Malware in @exxonmobil/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @exor/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @exeloncorp/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @espn-lazysizes/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @espn/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @eset/fetlife-assets (npm)
- Jun 20, 2022
Malware in @exeloncorp/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @espn-lazysizes/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @espn/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @eset/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @edwardjones/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @dropcontact/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @dropbox/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @drive2/fetlife-assets (npm)
- Jun 20, 2022
Malware in @dropbox/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @dropcontact/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @drive2/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @edwardjones/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @dozuki/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @dentrix/fetlife-assets (npm)
- Jun 20, 2022
Malware in @dozuki/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @dentrix/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @defectdojo/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @cvshealth/fetlife-assets (npm)
- Jun 20, 2022
Malware in @cvshealth/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @defectdojo/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @cooley/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @coinalpha/fetlife-assets (npm)
- Jun 20, 2022
Malware in @coinalpha/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @cooley/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @codahosted/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @codacontent/fetlife-assets (npm)
- Jun 20, 2022
Malware in @codahosted/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @codacontent/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @clenergy/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @clalit/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @cirrusinsight/fetlife-assets (npm)
- Jun 20, 2022
Malware in @cirrusinsight/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @clenergy/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @clalit/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @azimo/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @aswatson/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @aodocs/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @amerisourcebergen/fetlife-assets (npm)
Page 5053 of 5,078