Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,878 total in npm · sorted newest first- Jun 13, 2022
Malware in subek
1 compromised version
- Jun 13, 2022
Malware in dist-sidr
1 compromised version
- Jun 13, 2022
Malware in icons-package
1 compromised version
- Jun 13, 2022
Malware in packages-icons
1 compromised version
- Jun 13, 2022
Malware in package-show
1 compromised version
- Jun 13, 2022
Malware in package-icon
1 compromised version
- Jun 10, 2022
Malware in nab-packages-react-utils-nab
1 compromised version
- Jun 10, 2022
Malicious code in colorred (npm)
- Jun 10, 2022
Malware in colorred
1 compromised version
- Jun 10, 2022
Malicious code in vpc-stack-with-issues (npm)
- Jun 10, 2022
Malicious code in testte (npm)
- Jun 10, 2022
Malware in testte
1 compromised version
- Jun 10, 2022
Malware in vpc-stack-with-issues
1 compromised version
- Jun 10, 2022
Malicious code in ferris-design-tokens (npm)
- Jun 10, 2022
Malware in ferris-design-tokens
1 compromised version
- Jun 10, 2022
Malicious code in colorss-v11 (npm)
- Jun 10, 2022
Malware in colorss-v11
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/async-exports (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/async-exports
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/commercial-operations (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/commercial-operations
1 compromised version
- Jun 9, 2022
Malicious code in @manomano-toolbox/components (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/components
1 compromised version
- Jun 9, 2022
Malicious code in @spinak/iac-lib (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/catalog (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/api-gateway (npm)
- Jun 9, 2022
Malware in @spinak/iac-lib
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/catalog
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/api-gateway
1 compromised version
- Jun 9, 2022
Malicious code in @spinak/iac (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/toolkit (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/pim-management (npm)
- Jun 9, 2022
Malicious code in @manomano-toolbox/hub (npm)
- Jun 9, 2022
Malware in @manomano-toolbox/hub
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/toolkit
1 compromised version
- Jun 9, 2022
Malware in @spinak/iac
1 compromised version
- Jun 9, 2022
Malware in @manomano-toolbox/pim-management
1 compromised version
- Jun 9, 2022
Malicious code in @tide-web-apps/bert2 (npm)
- Jun 9, 2022
Malware in @tide-web-apps/bert2
1 compromised version
- Jun 9, 2022
Malicious code in zzzhelloeveryone (npm)
- Jun 9, 2022
Malicious code in thisisveryfistpackage11 (npm)
- Jun 9, 2022
Malicious code in reqsender321 (npm)
- Jun 9, 2022
Malicious code in newtestforme1008 (npm)
- Jun 9, 2022
Malicious code in newtestforme1007 (npm)
- Jun 9, 2022
Malicious code in anotherpackagefor101 (npm)
- Jun 9, 2022
Malware in zzzhelloeveryone
1 compromised version
- Jun 9, 2022
Malware in anotherpackagefor101
1 compromised version
- Jun 9, 2022
Malware in newtestforme1008
1 compromised version
- Jun 9, 2022
Malware in reqsender321
1 compromised version
- Jun 9, 2022
Malware in thisisveryfistpackage11
1 compromised version
Page 5065 of 5,078