Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malicious code in module-worker (npm)
- Jun 20, 2022
Malicious code in miew-cli (npm)
- Jun 20, 2022
Malicious code in miew-ap (npm)
- Jun 20, 2022
Malicious code in matic-docs (npm)
- Jun 20, 2022
Malicious code in manualtestapp (npm)
- Jun 20, 2022
Malicious code in launchdarkly-cloudflare-worker-template (npm)
- Jun 20, 2022
Malicious code in launchdarkly-api-typescript-sample (npm)
- Jun 20, 2022
Malicious code in intercom-react-native-example (npm)
- Jun 20, 2022
Malicious code in integration-framework (npm)
- Jun 20, 2022
Malicious code in helloreactnative (npm)
- Jun 20, 2022
Malicious code in git-gatsby (npm)
- Jun 20, 2022
Malicious code in epam-promo (npm)
- Jun 20, 2022
Malicious code in epam-assets (npm)
- Jun 20, 2022
Malicious code in dummy_app (npm)
- Jun 20, 2022
Malicious code in doom-workers-site (npm)
- Jun 20, 2022
Malicious code in do-worker (npm)
- Jun 20, 2022
Malicious code in discourse-prepend-tags-in-topic-slug (npm)
- Jun 20, 2022
Malicious code in cs-task-runner (npm)
- Jun 20, 2022
Malicious code in crypto-com-chain-wallet (npm)
- Jun 20, 2022
Malicious code in cloudinary-sample-angular (npm)
- Jun 20, 2022
Malicious code in cloudflare-docs-engine (npm)
- Jun 20, 2022
Malicious code in cloudflare-docs (npm)
- Jun 20, 2022
Malicious code in client-sdk-contract-tests (npm)
- Jun 20, 2022
Malicious code in cli-e2e (npm)
- Jun 20, 2022
Malicious code in chain-desktop-wallet (npm)
- Jun 20, 2022
Malicious code in boilerplate-fig-autocomplete (npm)
- Jun 20, 2022
Malicious code in blockchain-wallet-ios (npm)
- Jun 20, 2022
Malicious code in blockchain-classic-wallet (npm)
- Jun 20, 2022
Malicious code in atomic-next (npm)
- Jun 20, 2022
Malicious code in atomic-angular (npm)
- Jun 20, 2022
Malicious code in assign-pr (npm)
- Jun 20, 2022
Malicious code in assign-issue (npm)
- Jun 20, 2022
Malicious code in apps-showcase (npm)
- Jun 20, 2022
Malicious code in angular-cloudinary-photo (npm)
- Jun 20, 2022
Malware in epam-promo
1 compromised version
- Jun 20, 2022
Malware in proof-generation-api
1 compromised version
- Jun 20, 2022
Malware in assign-pr
1 compromised version
- Jun 20, 2022
Malware in cs-task-runner
1 compromised version
- Jun 20, 2022
Malware in pages-plugins
1 compromised version
- Jun 20, 2022
Malware in plasma-website
1 compromised version
- Jun 20, 2022
Malware in doom-workers-site
1 compromised version
- Jun 20, 2022
Malware in do-worker
1 compromised version
- Jun 20, 2022
Malware in xp-ui
1 compromised version
- Jun 20, 2022
Malware in redux-data-model-documentation
1 compromised version
- Jun 20, 2022
Malware in react-datepicker-docs
1 compromised version
- Jun 20, 2022
Malware in sdk-release
1 compromised version
- Jun 20, 2022
Malware in cloudflare-docs
1 compromised version
- Jun 20, 2022
Malware in crypto-com-chain-wallet
1 compromised version
- Jun 20, 2022
Malware in miew-cli
1 compromised version
- Jun 20, 2022
Malware in wallet-options
1 compromised version
Page 5059 of 5,078