Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malware in rnskia
1 compromised version
- Jun 20, 2022
Malware in megaman-007mega
1 compromised version
- Jun 20, 2022
Malware in minis-samples
1 compromised version
- Jun 20, 2022
Malware in snapcanvas-sdk
1 compromised version
- Jun 20, 2022
Malware in slack-notification
1 compromised version
- Jun 20, 2022
Malware in eth-faucet
1 compromised version
- Jun 20, 2022
Malware in pcln-types
1 compromised version
- Jun 20, 2022
Malware in contract-metadata
1 compromised version
- Jun 20, 2022
Malware in heft-component-rig
1 compromised version
- Jun 20, 2022
Malware in template-snap-monorepo
1 compromised version
- Jun 20, 2022
Malware in typescript-snap
1 compromised version
- Jun 20, 2022
Malware in example-api-routes
1 compromised version
- Jun 20, 2022
Malware in nnabla-browser
1 compromised version
- Jun 20, 2022
Malware in polaris-for-figma
1 compromised version
- Jun 20, 2022
Malware in example-rust
1 compromised version
- Jun 20, 2022
Malware in action-create-release-pr
1 compromised version
- Jun 20, 2022
Malware in files_pdfviewer
1 compromised version
- Jun 20, 2022
Malware in webpack-vue-config
1 compromised version
- Jun 20, 2022
Malware in polaris-for-vscode
1 compromised version
- Jun 20, 2022
Malware in bakaman
1 compromised version
- Jun 20, 2022
Malware in new-npm-packages
1 compromised version
- Jun 20, 2022
Malware in react-jesting-library
1 compromised version
- Jun 20, 2022
Malicious code in alpaca-oas (npm)
- Jun 20, 2022
Malicious code in action-require-additional-reviewer (npm)
- Jun 20, 2022
Malicious code in xp-ui (npm)
- Jun 20, 2022
Malicious code in wwi-app (npm)
- Jun 20, 2022
Malicious code in workerskv.gui (npm)
- Jun 20, 2022
Malicious code in workers.cloudflare.com (npm)
- Jun 20, 2022
Malicious code in workers-airtable-form-handler (npm)
- Jun 20, 2022
Malicious code in workers-airtable-form (npm)
- Jun 20, 2022
Malicious code in web-sdk-mono-repo (npm)
- Jun 20, 2022
Malicious code in web-scripts-monorepo (npm)
- Jun 20, 2022
Malicious code in wallet-options (npm)
- Jun 20, 2022
Malicious code in v3-monorepo (npm)
- Jun 20, 2022
Malicious code in toolbox-script (npm)
- Jun 20, 2022
Malicious code in timebase-web-admin (npm)
- Jun 20, 2022
Malicious code in theme-whale-light (npm)
- Jun 20, 2022
Malicious code in th-simple-keyring (npm)
- Jun 20, 2022
Malicious code in share-service-client (npm)
- Jun 20, 2022
Malicious code in sdk-release (npm)
- Jun 20, 2022
Malicious code in research.cloudflare.com (npm)
- Jun 20, 2022
Malicious code in reorgs-frontend (npm)
- Jun 20, 2022
Malicious code in redux-data-model-documentation (npm)
- Jun 20, 2022
Malicious code in react-ldclient-default-values (npm)
- Jun 20, 2022
Malicious code in react-datepicker-docs (npm)
- Jun 20, 2022
Malicious code in proof-generation-api (npm)
- Jun 20, 2022
Malicious code in prerelease-registry (npm)
- Jun 20, 2022
Malicious code in platform-client (npm)
- Jun 20, 2022
Malicious code in plasma-website (npm)
- Jun 20, 2022
Malicious code in pages-plugins (npm)
Page 5058 of 5,078