Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 14, 2022
Malware in du_npm_integ
1 compromised version
- Jun 14, 2022
Malware in du_npm_inte
1 compromised version
- Jun 14, 2022
Malicious code in purple_team_midway_3 (npm)
- Jun 14, 2022
Malicious code in purple_team_midway_2 (npm)
- Jun 14, 2022
Malicious code in purple_team_midway (npm)
- Jun 14, 2022
Malware in purple_team_midway_3
1 compromised version
- Jun 14, 2022
Malware in purple_team_midway_2
1 compromised version
- Jun 14, 2022
Malware in purple_team_midway
1 compromised version
- Jun 14, 2022
Malicious code in storage-image-processing-api-functions (npm)
- Jun 14, 2022
Malicious code in pagetour-sdk.http (npm)
- Jun 14, 2022
Malicious code in bindingx-weex-plugin (npm)
- Jun 14, 2022
Malware in pagetour-sdk.http
1 compromised version
- Jun 14, 2022
Malware in storage-image-processing-api-functions
1 compromised version
- Jun 14, 2022
Malware in bindingx-weex-plugin
1 compromised version
- Jun 13, 2022
Malicious code in sp-bootstrap (npm)
- Jun 13, 2022
Malware in sp-bootstrap
1 compromised version
- Jun 13, 2022
Malicious code in vault-updater (npm)
- Jun 13, 2022
Malicious code in linkbubble-website (npm)
- Jun 13, 2022
Malicious code in link-bubble (npm)
- Jun 13, 2022
Malicious code in brave-research-participation-tool (npm)
- Jun 13, 2022
Malicious code in brave-ledger (npm)
- Jun 13, 2022
Malicious code in brave-ios (npm)
- Jun 13, 2022
Malicious code in brave-eyeshade (npm)
- Jun 13, 2022
Malicious code in brave-extension (npm)
- Jun 13, 2022
Malicious code in brave-core-crx-packager (npm)
- Jun 13, 2022
Malware in link-bubble
1 compromised version
- Jun 13, 2022
Malware in linkbubble-website
1 compromised version
- Jun 13, 2022
Malware in brave-ios
1 compromised version
- Jun 13, 2022
Malware in brave-extension
1 compromised version
- Jun 13, 2022
Malware in brave-ledger
1 compromised version
- Jun 13, 2022
Malware in brave-eyeshade
1 compromised version
- Jun 13, 2022
Malware in brave-research-participation-tool
1 compromised version
- Jun 13, 2022
Malware in vault-updater
1 compromised version
- Jun 13, 2022
Malware in brave-core-crx-packager
1 compromised version
- Jun 13, 2022
Malicious code in web-discovery-project (npm)
- Jun 13, 2022
Malicious code in brave-core (npm)
- Jun 13, 2022
Malicious code in brave-chromium-themes (npm)
- Jun 13, 2022
Malicious code in brave-bitgo-client (npm)
- Jun 13, 2022
Malware in brave-core
1 compromised version
- Jun 13, 2022
Malware in brave-chromium-themes
1 compromised version
- Jun 13, 2022
Malware in brave-bitgo-client
1 compromised version
- Jun 13, 2022
Malware in web-discovery-project
1 compromised version
- Jun 13, 2022
Malicious code in kubernetes-ui (npm)
- Jun 13, 2022
Malicious code in kubernetes-dashboard (npm)
- Jun 13, 2022
Malicious code in downloadkubernetes (npm)
- Jun 13, 2022
Malware in kubernetes-ui
1 compromised version
- Jun 13, 2022
Malware in kubernetes-dashboard
1 compromised version
- Jun 13, 2022
Malware in downloadkubernetes
1 compromised version
- Jun 13, 2022
Malicious code in aframe-vimeo-component (npm)
- Jun 13, 2022
Malicious code in vimeo_depth_player (npm)
Page 5063 of 5,078