Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,329 total in npm · sorted newest first- Dec 19, 2024
Malicious code in byted-gulu-ms-logger (npm)
1 compromised version
- Dec 19, 2024
Malware in client-admin
1 compromised version
- Dec 19, 2024
Malware in client-mpa
1 compromised version
- Dec 19, 2024
Malware in client-analysis
1 compromised version
- Dec 19, 2024
Malware in tools_platform
1 compromised version
- Dec 19, 2024
Malware in tiktok-ui
1 compromised version
- Dec 19, 2024
Malware in client-consent
1 compromised version
- Dec 19, 2024
Malware in client-data
1 compromised version
- Dec 19, 2024
Malware in byted-gulu-ms-logger
1 compromised version
- Dec 19, 2024
Malware in df-npm-placeholder
1 compromised version
- Dec 19, 2024
Malware in client-cloud-phone
1 compromised version
- Dec 19, 2024
Malware in buoyant-utils
1 compromised version
- Dec 19, 2024
Malware in support-conversations
1 compromised version
- Dec 19, 2024
Malware in stripe-internal
1 compromised version
- Dec 19, 2024
Malicious code in payment-tx-params-api (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in nextjs-app-router (npm)
1 compromised version
- Dec 19, 2024
Malicious code in eip-681-qr-generator (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in cdp-wallet-manager (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in cdp-agentkit-monorepo (npm)
1 compromised version
- Dec 19, 2024
Malicious code in build-onchain-apps (npm)
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-monorepo
1 compromised version
- Dec 19, 2024
Malware in nextjs-app-router
1 compromised version
- Dec 19, 2024
Malware in cdp-wallet-manager
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-nodejs
1 compromised version
- Dec 19, 2024
Malware in build-onchain-apps
1 compromised version
- Dec 19, 2024
Malware in payment-tx-params-api
1 compromised version
- Dec 19, 2024
Malware in usdc.js
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit-core
1 compromised version
- Dec 19, 2024
Malware in eip-681-qr-generator
1 compromised version
- Dec 19, 2024
Malware in goworker
1 compromised version
- Dec 19, 2024
Malware in cdp-agentkit
1 compromised version
- Dec 19, 2024
Malware in testing-bounty123
1 compromised version
- Dec 19, 2024
Malware in shyftportal
1 compromised version
- Dec 19, 2024
Malware in bounty123ay
1 compromised version
- Dec 19, 2024
Malicious code in metamodel-editor (npm)
2 compromised versions
- Dec 19, 2024
Malware in metamodel-editor
1 compromised version
- Dec 19, 2024
Malicious code in bitcoinjs-lib-v6 (npm)
2 compromised versions
- Dec 19, 2024
Malware in bitcoinjs-lib-v6
1 compromised version
- Dec 19, 2024
Malware in ba-graphics
1 compromised version
- Dec 19, 2024
Malicious code in xeno-api (npm)
2 compromised versions
- Dec 19, 2024
Malicious code in upgrade-solara (npm)
7 compromised versions
- Dec 19, 2024
Malicious code in deathball (npm)
1 compromised version
- Dec 19, 2024
Malicious code in core-builder (npm)
1 compromised version
- Dec 19, 2024
Malicious code in atlantis-api (npm)
2 compromised versions
- Dec 19, 2024
Malware in core-builder
1 compromised version
- Dec 19, 2024
Malware in upgrade-solara
1 compromised version
- Dec 19, 2024
Malware in xeno-api
1 compromised version
- Dec 19, 2024
Malware in deathball
1 compromised version
- Dec 19, 2024
Malware in atlantis-api
1 compromised version
- Dec 19, 2024
Malware in aries-bifold-root
1 compromised version
Page 6026 of 6,647