Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Mar 19, 2025
Malware in timesketch
1 compromised version
- Mar 19, 2025
Malware in whatsapp-sdk-docs
1 compromised version
- Mar 19, 2025
Malware in atlas-user-monitor
1 compromised version
- Mar 19, 2025
Malware in atlas-websocket
1 compromised version
- Mar 19, 2025
Malware in @contraktor-tech/poc_confusion
1 compromised version
- Mar 18, 2025
Malicious code in @brix-crypto/crypto-js (npm)
1 compromised version
- Mar 18, 2025
Malicious code in antlir2-docs (npm)
1 compromised version
- Mar 18, 2025
Malicious code in ember-inner-addon (npm)
- Mar 18, 2025
Malicious code in backjob (npm)
1 compromised version
- Mar 18, 2025
Malware in backjob
1 compromised version
- Mar 18, 2025
Malware in ember-inner-addon
1 compromised version
- Mar 18, 2025
Malware in @idme-components/component-utilities
1 compromised version
- Mar 18, 2025
Malware in vdkweb-utils
1 compromised version
- Mar 18, 2025
Malware in vladmandic
1 compromised version
- Mar 18, 2025
Malicious code in tasks_mangement (npm)
- Mar 18, 2025
Malware in tasks_mangement
1 compromised version
- Mar 18, 2025
Malicious code in tasks_viewer (npm)
4 compromised versions
- Mar 18, 2025
Malicious code in task_process (npm)
- Mar 18, 2025
Malicious code in input-process (npm)
- Mar 18, 2025
Malware in task_process
1 compromised version
- Mar 18, 2025
Malware in input-process
1 compromised version
- Mar 18, 2025
Malware in tasks_viewer
1 compromised version
- Mar 18, 2025
Malicious code in plasty (npm)
- Mar 18, 2025
Malicious code in importo (npm)
- Mar 18, 2025
Malicious code in gufferjs (npm)
- Mar 18, 2025
Malware in importo
1 compromised version
- Mar 18, 2025
Malware in gufferjs
1 compromised version
- Mar 18, 2025
Malware in plasty
1 compromised version
- Mar 18, 2025
Malicious code in wokes (npm)
- Mar 18, 2025
Malicious code in tokesjs (npm)
- Mar 18, 2025
Malicious code in tokes (npm)
- Mar 18, 2025
Malicious code in syncdaemon (npm)
- Mar 18, 2025
Malicious code in plast3y (npm)
- Mar 18, 2025
Malicious code in pendeck (npm)
- Mar 18, 2025
Malicious code in mysql_nlp (npm)
- Mar 18, 2025
Malicious code in connectrix (npm)
- Mar 18, 2025
Malware in tokes
1 compromised version
- Mar 18, 2025
Malware in connectrix
1 compromised version
- Mar 18, 2025
Malware in tokesjs
1 compromised version
- Mar 18, 2025
Malware in wokes
1 compromised version
- Mar 18, 2025
Malware in plast3y
1 compromised version
- Mar 18, 2025
Malware in syncdaemon
1 compromised version
- Mar 18, 2025
Malware in pendeck
1 compromised version
- Mar 18, 2025
Malware in mysql_nlp
1 compromised version
- Mar 18, 2025
Malicious code in py_pool (npm)
- Mar 18, 2025
Malicious code in ex-edge (npm)
- Mar 18, 2025
Malicious code in cbridge (npm)
- Mar 18, 2025
Malware in cbridge
1 compromised version
- Mar 18, 2025
Malware in ex-edge
1 compromised version
- Mar 18, 2025
Malware in py_pool
1 compromised version
Page 5926 of 6,634