Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,860 total in npm · sorted newest first- May 31, 2022
Malicious code in wagtail-supertable (npm)
- May 31, 2022
Malicious code in nginxconfig.io (npm)
- May 31, 2022
Malicious code in mes-bah (npm)
- May 31, 2022
Malicious code in isomorphic-core (npm)
- May 31, 2022
Malicious code in brlc-token (npm)
- May 31, 2022
Malicious code in apollo-federation-ruby (npm)
- May 31, 2022
Malware in nginxconfig.io
1 compromised version
- May 31, 2022
Malware in apollo-federation-ruby
1 compromised version
- May 31, 2022
Malware in ado-vue
1 compromised version
- May 31, 2022
Malware in brlc-token
1 compromised version
- May 31, 2022
Malware in mes-bah
1 compromised version
- May 31, 2022
Malware in woocommerce-infinitepay
1 compromised version
- May 31, 2022
Malware in isomorphic-core
1 compromised version
- May 31, 2022
Malware in wagtail-supertable
1 compromised version
- May 31, 2022
Malicious code in vro-language-server (npm)
- May 31, 2022
Malicious code in mad-expo-core (npm)
- May 31, 2022
Malicious code in lib-admin-ui (npm)
- May 31, 2022
Malicious code in handsontable-examples (npm)
- May 31, 2022
Malware in lib-admin-ui
1 compromised version
- May 31, 2022
Malware in mad-expo-core
1 compromised version
- May 31, 2022
Malware in handsontable-examples
1 compromised version
- May 31, 2022
Malware in vro-language-server
1 compromised version
- May 31, 2022
Malicious code in spr-svg-loaders (npm)
- May 31, 2022
Malware in spr-svg-loaders
1 compromised version
- May 31, 2022
Malicious code in argo-hosting-api (npm)
- May 31, 2022
Malware in argo-hosting-api
1 compromised version
- May 31, 2022
Malicious code in mmccii (npm)
- May 31, 2022
Malware in mmccii
1 compromised version
- May 31, 2022
Malicious code in activity-dropdown-legacy (npm)
- May 31, 2022
Malware in activity-dropdown-legacy
1 compromised version
- May 31, 2022
Malicious code in eslint-plugin-pan (npm)
- May 31, 2022
Malware in eslint-plugin-pan
1 compromised version
- May 31, 2022
Malicious code in malicious-pre-install-package (npm)
- May 31, 2022
Malware in malicious-pre-install-package
1 compromised version
- May 31, 2022
Malicious code in survey-widgets (npm)
- May 31, 2022
Malware in survey-widgets
1 compromised version
- May 31, 2022
Malicious code in sushi-client (npm)
- May 31, 2022
Malware in sushi-client
1 compromised version
- May 31, 2022
Malicious code in trezor-wallet (npm)
- May 31, 2022
Malicious code in trezor-ui-components (npm)
- May 31, 2022
Malicious code in trezor-translations-manager (npm)
- May 31, 2022
Malicious code in some-crazy-dep-that-doesnt-exist (npm)
- May 31, 2022
Malicious code in plugin-welcome (npm)
- May 31, 2022
Malicious code in next-plugin-normal (npm)
- May 31, 2022
Malware in trezor-ui-components
1 compromised version
- May 31, 2022
Malware in plugin-welcome
1 compromised version
- May 31, 2022
Malware in next-plugin-normal
1 compromised version
- May 31, 2022
Malware in some-crazy-dep-that-doesnt-exist
1 compromised version
- May 31, 2022
Malware in trezor-translations-manager
1 compromised version
- May 31, 2022
Malware in trezor-wallet
1 compromised version
Page 5071 of 5,078