Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
253,860 total in npm · sorted newest first- May 31, 2022
Malicious code in ads-monsuperpackage-dependency-confusion (npm)
- May 31, 2022
Malware in ads-monsuperpackage-dependency-confusion
1 compromised version
- May 31, 2022
Malicious code in pm-web-mapp-shared (npm)
- May 31, 2022
Malware in pm-web-mapp-shared
1 compromised version
- May 31, 2022
Malicious code in sherlocksecure (npm)
- May 31, 2022
Malicious code in enterprise_api_app (npm)
- May 31, 2022
Malicious code in com.unity.xr.magicleap (npm)
- May 31, 2022
Malware in com.unity.xr.magicleap
1 compromised version
- May 31, 2022
Malware in sherlocksecure
1 compromised version
- May 31, 2022
Malware in enterprise_api_app
1 compromised version
- May 31, 2022
Malicious code in colors-rgb (npm)
- May 31, 2022
Malware in colors-rgb
1 compromised version
- May 31, 2022
Malicious code in express-lastest (npm)
- May 31, 2022
Malware in express-lastest
1 compromised version
- May 31, 2022
Malicious code in web-playback-sdk-sample-app (npm)
- May 31, 2022
Malicious code in spotify.github.io (npm)
- May 31, 2022
Malicious code in perfetto-ui (npm)
- May 31, 2022
Malicious code in hls-outreach-sms (npm)
- May 31, 2022
Malware in web-playback-sdk-sample-app
1 compromised version
- May 31, 2022
Malware in hls-outreach-sms
1 compromised version
- May 31, 2022
Malware in spotify.github.io
1 compromised version
- May 31, 2022
Malware in perfetto-ui
1 compromised version
- May 31, 2022
Malicious code in maddysmith-test (npm)
- May 31, 2022
Malware in maddysmith-test
1 compromised version
- May 31, 2022
Malicious code in wireit-website (npm)
- May 31, 2022
Malicious code in react-devtools-release-script (npm)
- May 31, 2022
Malicious code in linter-marlint (npm)
- May 31, 2022
Malware in linter-marlint
1 compromised version
- May 31, 2022
Malware in react-devtools-release-script
1 compromised version
- May 31, 2022
Malware in wireit-website
1 compromised version
- May 31, 2022
Malicious code in npmupload_test-xxxxxxxxxxxxx (npm)
- May 31, 2022
Malicious code in ceye-test-0001 (npm)
- May 31, 2022
Malware in npmupload_test-xxxxxxxxxxxxx
1 compromised version
- May 31, 2022
Malware in ceye-test-0001
1 compromised version
- May 31, 2022
Malicious code in qunit-begin (npm)
- May 31, 2022
Malware in qunit-begin
1 compromised version
- May 31, 2022
Malicious code in @techops-ui/ping-authentication (npm)
- May 31, 2022
Malware in @techops-ui/ping-authentication
1 compromised version
- May 31, 2022
Malicious code in uitk-react-utils (npm)
- May 31, 2022
Malicious code in bernie-analytics (npm)
- May 31, 2022
Malicious code in bernie-abacus (npm)
- May 31, 2022
Malware in bernie-analytics
1 compromised version
- May 31, 2022
Malware in bernie-abacus
1 compromised version
- May 31, 2022
Malware in uitk-react-utils
1 compromised version
- May 31, 2022
Malicious code in web3-util-update (npm)
- May 31, 2022
Malware in web3-util-update
1 compromised version
- May 31, 2022
Malicious code in vor-test-project-npm-please-ignore-1 (npm)
- May 31, 2022
Malicious code in simple-project-pkg-b (npm)
- May 31, 2022
Malware in simple-project-pkg-b
1 compromised version
- May 31, 2022
Malware in vor-test-project-npm-please-ignore-1
1 compromised version
Page 5072 of 5,078