Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Jan 24, 2025
Malicious code in ig-lighthouse-to-influxdb (npm)
- Jan 24, 2025
Malicious code in ig-lighthouse-security-audits (npm)
4 compromised versions
- Jan 24, 2025
Malicious code in ig-grunt-maven-multi-deploy (npm)
- Jan 24, 2025
Malicious code in ig-ember-perf (npm)
- Jan 24, 2025
Malware in ig-lighthouse-to-influxdb
1 compromised version
- Jan 24, 2025
Malware in ig-ember-perf
1 compromised version
- Jan 24, 2025
Malware in ig-lighthouse-security-audits
1 compromised version
- Jan 24, 2025
Malware in ig-release
1 compromised version
- Jan 24, 2025
Malware in ig-sonar-runner
1 compromised version
- Jan 24, 2025
Malware in ig-grunt-maven-multi-deploy
1 compromised version
- Jan 24, 2025
Malicious code in airbnb-user (npm)
- Jan 24, 2025
Malicious code in airbnb-tools (npm)
- Jan 24, 2025
Malware in airbnb-user
1 compromised version
- Jan 24, 2025
Malware in airbnb-tools
1 compromised version
- Jan 24, 2025
Malware in ebay-testerx
1 compromised version
- Jan 24, 2025
Malicious code in ebay-testo (npm)
- Jan 24, 2025
Malicious code in ebay-testeru (npm)
- Jan 24, 2025
Malicious code in ebay-testera (npm)
- Jan 24, 2025
Malicious code in ebay-testa (npm)
- Jan 24, 2025
Malware in ebay-testeru
1 compromised version
- Jan 24, 2025
Malware in ebay-testera
1 compromised version
- Jan 24, 2025
Malware in ebay-testa
1 compromised version
- Jan 24, 2025
Malware in ebay-tester
1 compromised version
- Jan 24, 2025
Malware in ebay-testo
1 compromised version
- Jan 24, 2025
Malicious code in eslint-config-scality (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-admin (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-cache (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meta-gateway (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-database (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-sync (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-oauth (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-api (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-tools (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-api-client (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-analytics (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-user (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-sync (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-utils (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-auth (npm)
1 compromised version
- Jan 24, 2025
Malicious code in lyft-tests (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-model (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-jira (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-event (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-cloud (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-checkout (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-logger (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-connect (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-internal (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-database (npm)
1 compromised version
- Jan 24, 2025
Malicious code in meli-db (npm)
1 compromised version
Page 5999 of 6,647