Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 20, 2022
Malware in datadog-app-stream-admin
1 compromised version
- Jun 20, 2022
Malware in opensea-erc1155
1 compromised version
- Jun 20, 2022
Malware in nodejs-driver
1 compromised version
- Jun 20, 2022
Malware in flipper-plugin-ribtree
1 compromised version
- Jun 20, 2022
Malware in datadog-app-example-stream-admin
1 compromised version
- Jun 20, 2022
Malware in opensea-creatures
1 compromised version
- Jun 20, 2022
Malware in procore-sample-ror
1 compromised version
- Jun 20, 2022
Malware in vuestic-admin
1 compromised version
- Jun 20, 2022
Malware in appsec-event-rules-tools
1 compromised version
- Jun 20, 2022
Malware in adelphi-api
1 compromised version
- Jun 20, 2022
Malware in datadog-app
1 compromised version
- Jun 20, 2022
Malware in datadog-agent-github-action
1 compromised version
- Jun 20, 2022
Malware in 0x-fee-wrapper-contract
1 compromised version
- Jun 20, 2022
Malware in custom-pages-react-boilerplate
1 compromised version
- Jun 20, 2022
Malware in frontegg-template-app
1 compromised version
- Jun 20, 2022
Malware in intercom-react-native.podspec
1 compromised version
- Jun 20, 2022
Malware in sdk_repl_app
1 compromised version
- Jun 20, 2022
Malware in frontegg-angular
1 compromised version
- Jun 20, 2022
Malware in collection-events-discord-webhook
1 compromised version
- Jun 20, 2022
Malware in nft-tutorial
1 compromised version
- Jun 20, 2022
Malware in astrajs
1 compromised version
- Jun 20, 2022
Malware in metadata-api-nodejs
1 compromised version
- Jun 20, 2022
Malware in opensea-ships-log
1 compromised version
- Jun 20, 2022
Malware in action-prebuildify
1 compromised version
- Jun 20, 2022
Malware in pulsar-sink-docs
1 compromised version
- Jun 20, 2022
Malware in stargate-docs
1 compromised version
- Jun 20, 2022
Malware in pagespeed-server
1 compromised version
- Jun 20, 2022
Malware in datadog-app-sentiment
1 compromised version
- Jun 20, 2022
Malware in datadog-app-example-random-dog-dog-image-widget
1 compromised version
- Jun 20, 2022
Malware in cdcrep-docs
1 compromised version
- Jun 20, 2022
Malicious code in email-report (npm)
- Jun 20, 2022
Malicious code in cat-webcomponent-image (npm)
- Jun 20, 2022
Malicious code in cat-weather-widget (npm)
- Jun 20, 2022
Malware in cat-webcomponent-image
1 compromised version
- Jun 20, 2022
Malware in email-report
1 compromised version
- Jun 20, 2022
Malware in cat-weather-widget
1 compromised version
- Jun 15, 2022
Malicious code in @prescreen/distillery (npm)
- Jun 15, 2022
Malware in @prescreen/distillery
1 compromised version
- Jun 15, 2022
Malicious code in flame-vali (npm)
- Jun 15, 2022
Malware in flame-vali
1 compromised version
- Jun 14, 2022
Malicious code in ngllibmanager (npm)
- Jun 14, 2022
Malware in ngllibmanager
1 compromised version
- Jun 14, 2022
Malicious code in dig-tokens (npm)
- Jun 14, 2022
Malware in dig-tokens
1 compromised version
- Jun 14, 2022
Malicious code in analytika-analytika-utils (npm)
- Jun 14, 2022
Malware in analytika-analytika-utils
1 compromised version
- Jun 14, 2022
Malicious code in @tide-web-apps/global-environments (npm)
- Jun 14, 2022
Malware in @tide-web-apps/global-environments
1 compromised version
- Jun 14, 2022
Malicious code in du_npm_integ (npm)
- Jun 14, 2022
Malicious code in du_npm_inte (npm)
Page 5062 of 5,078