Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malicious code in @casinohuone/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @camdenliving/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @calcalist/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @buzzblocks/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @berkshirehathaway/fetlife-assets (npm)
- Jun 20, 2022
Malware in @calcalist/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @aodocs/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @amerisourcebergen/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @berkshirehathaway/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @camdenliving/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @casinohuone/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @aswatson/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @azimo/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @buzzblocks/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @amazonvrp/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @alscotoday/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @airvpn/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @airmiles/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @airbytehq/fetlife-assets (npm)
- Jun 20, 2022
Malware in @airvpn/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @airmiles/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @amazonvrp/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @alscotoday/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @airbytehq/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @abbvie/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in @8x8/fetlife-assets (npm)
- Jun 20, 2022
Malware in @8x8/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in @abbvie/fetlife-assets
1 compromised version
- Jun 20, 2022
Malicious code in @13tv/fetlife-assets (npm)
- Jun 20, 2022
Malicious code in ngx-translate (npm)
- Jun 20, 2022
Malicious code in headcache (npm)
- Jun 20, 2022
Malicious code in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install (npm)
- Jun 20, 2022
Malware in @13tv/fetlife-assets
1 compromised version
- Jun 20, 2022
Malware in headcache
1 compromised version
- Jun 20, 2022
Malware in @eb1a3227cdc3fedbaec2fe38bf6c044a/do-not-install
1 compromised version
- Jun 20, 2022
Malware in ngx-translate
1 compromised version
- Jun 20, 2022
Malicious code in rlms (npm)
- Jun 20, 2022
Malware in rlms
1 compromised version
- Jun 20, 2022
Malicious code in iiipkillkdeqcyh (npm)
- Jun 20, 2022
Malware in iiipkillkdeqcyh
1 compromised version
- Jun 20, 2022
Malicious code in lqxebnynzfszeuh (npm)
- Jun 20, 2022
Malware in lqxebnynzfszeuh
1 compromised version
- Jun 20, 2022
Malicious code in cito-social (npm)
- Jun 20, 2022
Malware in cito-social
1 compromised version
- Jun 20, 2022
Malicious code in ahkgnrjyrlwqopq (npm)
- Jun 20, 2022
Malicious code in dckvisgimhpbkhd (npm)
- Jun 20, 2022
Malicious code in cgxlmojuyqadjgp (npm)
- Jun 20, 2022
Malware in ahkgnrjyrlwqopq
1 compromised version
- Jun 20, 2022
Malware in dckvisgimhpbkhd
1 compromised version
- Jun 20, 2022
Malware in cgxlmojuyqadjgp
1 compromised version
Page 5054 of 5,078