Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Feb 17, 2025
Malware in fameex-internal
1 compromised version
- Feb 17, 2025
Malware in fameex-test
1 compromised version
- Feb 17, 2025
Malware in fameex
1 compromised version
- Feb 17, 2025
Malicious code in orangex-test (npm)
- Feb 17, 2025
Malicious code in orangex-main (npm)
- Feb 17, 2025
Malicious code in orangex-internal (npm)
- Feb 17, 2025
Malicious code in orangex-dev (npm)
- Feb 17, 2025
Malware in orangex-test
1 compromised version
- Feb 17, 2025
Malware in orangex-main
1 compromised version
- Feb 17, 2025
Malware in orangex-dev
1 compromised version
- Feb 17, 2025
Malware in orangex-internal
1 compromised version
- Feb 17, 2025
Malicious code in p2pb2b-test (npm)
- Feb 17, 2025
Malicious code in p2pb2b-main (npm)
- Feb 17, 2025
Malicious code in p2pb2b-dev (npm)
- Feb 17, 2025
Malicious code in kcex-internal (npm)
- Feb 17, 2025
Malware in kcex-internal
1 compromised version
- Feb 17, 2025
Malware in p2pb2b-dev
1 compromised version
- Feb 17, 2025
Malware in p2pb2b-test
1 compromised version
- Feb 17, 2025
Malware in p2pb2b-main
1 compromised version
- Feb 17, 2025
Malicious code in p2pb2b-internal (npm)
- Feb 17, 2025
Malicious code in p2pb2b (npm)
- Feb 17, 2025
Malicious code in digifinex-test (npm)
- Feb 17, 2025
Malicious code in digifinex-main (npm)
- Feb 17, 2025
Malicious code in digifinex-internal (npm)
- Feb 17, 2025
Malicious code in digifinex-dev (npm)
- Feb 17, 2025
Malware in digifinex-internal
1 compromised version
- Feb 17, 2025
Malware in p2pb2b
1 compromised version
- Feb 17, 2025
Malware in digifinex-dev
1 compromised version
- Feb 17, 2025
Malware in digifinex-test
1 compromised version
- Feb 17, 2025
Malware in p2pb2b-internal
1 compromised version
- Feb 17, 2025
Malware in digifinex-main
1 compromised version
- Feb 17, 2025
Malicious code in hashkey-dev (npm)
- Feb 17, 2025
Malicious code in coinstore-test (npm)
- Feb 17, 2025
Malicious code in coinstore-main (npm)
- Feb 17, 2025
Malicious code in coinstore-internal (npm)
- Feb 17, 2025
Malicious code in coinstore-dev (npm)
- Feb 17, 2025
Malicious code in coinstore (npm)
- Feb 17, 2025
Malware in coinstore-main
1 compromised version
- Feb 17, 2025
Malware in coinstore-dev
1 compromised version
- Feb 17, 2025
Malware in coinstore-test
1 compromised version
- Feb 17, 2025
Malware in coinstore-internal
1 compromised version
- Feb 17, 2025
Malware in hashkey-dev
1 compromised version
- Feb 17, 2025
Malware in coinstore
1 compromised version
- Feb 17, 2025
Malicious code in yizhifabao63 (npm)
- Feb 17, 2025
Malicious code in yizhifabao62 (npm)
- Feb 17, 2025
Malicious code in yizhifabao61 (npm)
- Feb 17, 2025
Malicious code in yizhifabao60 (npm)
- Feb 17, 2025
Malicious code in yizhifabao59 (npm)
- Feb 17, 2025
Malware in yizhifabao63
1 compromised version
- Feb 17, 2025
Malware in yizhifabao62
1 compromised version
Page 5977 of 6,647